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ABSTRACT 


The possibility of geolocating a Long Term Evolution (LTE) subscriber station based on 
the timing advance ranging parameter within the network signal internals is investigated 
in this thesis. The basic approach to geolocation based on radial distances from multiple 
base stations is outlined. Specifics of the timing parameters used during LTE network 
entry are examined as they relate to calculating these distances. Computer simulation is 
used to demonstrate expected geolocation accuracy in multiple base station networks 
when estimating likely locations of subscriber stations on a two-dimensional coordinate 
mapping system. Computer simulation is further refined to demonstrate expected 
geolocation accuracy in multiple base station networks when estimating likely locations 
of subscriber stations on a three-dimensional coordinate mapping scheme. The 
possibility of fixes with ten times greater accuracy than in previous results in literature 
are shown by applying timing advance techniques to Global System for Mobile 
communications networks when using a two-dimensional coordinate mapping scheme. 
Accuracy capable of being within 50 centimeters when using a three-dimensional 
coordinate mapping scheme, comparable to the accuracy in Global Positioning System 


technologies, also is shown. 
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EXECUTIVE SUMMARY 


Long Term Evolution (LTE) is an emergent network technology demanding examination. 
Recently certified as a true Fourth Generation technology, it is poised as one of two 
technologies that will replace current Third Generation cellular networks as mobile 
subscribers use more and more data and circuit-switched networks continue to evolve 
into packet-switching networks using voice over Internet protocols. LTE provides a 
wireless high speed connection available to fixed or mobile subscribers whose location is 
not predetermined. Location information of subscribers on the network can be vital, 
especially in situations requiring emergency response teams for medical care or crisis 


scenarios, as well as aiding law enforcement and homeland security. 


Many methods exist for geolocating radio frequency equipment and devices and 
each has advantages and disadvantages. ‘Time difference-of-arrival requires receivers 
that are synchronized precisely, and frequency difference-of-arrival requires Doppler 
shifts generated by significant velocities. A solution lies within Global Positioning 
System (GPS) technology, where distribution of GPS chips within subscriber devices 
could provide location. However, this adds significant costs for manufacturing and 
power related issues for the mobile devices. Instead of relying on mechanisms internal to 
a subscriber unit to provide location, the LTE signal itself provides a network-ranging 
parameter called timing advance, which can be used to correlate the distance between a 


transmitting point, such as a tower, and the receiving mobile device entering the network. 


In LTE, uplink and downlink between towers and subscriber units 1s conducted 
primarily with a frequency-division duplexing scheme, which facilitates simultaneous 
communication in both directions. However, the arrival of the uplink messages to the 
tower from multiple subscribers requires coordination to prevent interference with other 
devices. Proper scheduling is achieved through the use of timing advance (TA), which 
the base station tower sends to a device to speed up or delay its data transmission and 


ensure each subscriber’s data is received in the appropriate time slot. 


xi 


With successful extraction of these messages from the air interface, a distance 
from the tower to the subscriber can be derived based on propagation speed, the speed of 
light, and how many units of timing advance the base station indicates to the subscriber to 
use. Previous studies explored this method to geolocate Global System for Mobile 
communications cell phones as well as for WiMAX fixed and mobile devices, and the 
purpose of this thesis was to apply the same techniques and principles to LTE networks, 


which use different physical layer parameters, modulation schemes and message formats. 


Investigation of LTE specifications revealed radio frame formats and _ their 
relation with the physical layer protocols and means of transmission over the air 
interface. Calculations for timing advance determined a maximum possible timing 


advance of 0.67 milliseconds, and each unit of timing advance equal to 78.125 meters. 


While laboratory testing equipment was on hand, the necessary software for 
analyzing LTE signals was not available, and an operational LTE testing area was still 
under development. Taking the calculations for timing advance derived from the LTE 
specifications, we employed computer software to generate simulated LTE networks with 


multiple base stations for testing geolocation methods. 


Modeling geolocation techniques used in the two-dimensional aspect, we 
simulated a multiple base station network with varying scenarios of base station 
placements and TA-based radii fluctuations and attempted to approximate a subscriber 
station’s location. Results of the simulations showed that in networks with various 
numbers of towers and random tower placements, the location of a subscriber could 
generally be approximated within 60 meters provided accurate tower placement is given 


and timing advance offsets are known. 


Taking into account that the TA-based offsets contained in the LTE signal 
internals corresponded to a height-generated distance from the peak of a tower to the 
subscriber below, we generated another set of computer simulations to examine 
geolocation within a three-dimensional model similar to GPS. Using TA distance as the 
radii for spheres radiating from a base station, where the top of the tower represents the 


center point of the sphere, we applied linear algebra for a spherical system of equations to 


X1V 


obtain a subscriber approximation generally falling within less than 50 centimeters of 
error provided tower characteristics of location and height and timing advance offsets are 


known. 


Geolocation within 50 centimeters based on theoretical passive collection of LTE 
signal data over the air interface provides a valuable asset, both to cellular networks in 
need of and offering location based services, and as an aid to law enforcement, 
emergency response teams, and tactical personnel. Simulations for both the two- 
dimensional and three-dimensional methods of geolocation demonstrate this capability 


based on internal signal parameters. 
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I. INTRODUCTION 


A. BACKGROUND: LTE AND WHY WE CARE 


The Third-Generation Partnership Project (3GPP) formed in 1998 acts as a 
standards-developing body responsible for specifications of the Third Generation (3G) 
Universal Terrestrial Radio Access (UTRA) and the Global System for Mobile 
communications (GSM) standards. The scope of the project when it was formed was to 
produce global specifications for a 3G mobile system based on an evolved GSM core 
network. The cellular technologies specified by 3GPP are the most widely deployed in 
the world, with more than 2.6 billion users in 2008. The latest step being studied and 
developed in 3GPP is an evolution of 3G into an evolved radio access, referred to as 


Long Term Evolution (LTE) [1]. 


The 3GPP intends LTE to be a fourth generation (4G) mobile-communication 
system that can take the telecom industry into the 2020s. In June 2005, a study item by 
the project finalized the requirements for LTE to ensure competiveness over a ten-year 
time frame. The requirements include reduced delays in terms of connection and 
transmission latency, increased user data rates, reduced cost per bit through improved 
spectral efficiency, and greater flexibility of spectrum usage in both new and pre-existing 
bands. Other key requirements involve simplified network architecture, reasonable 
power consumption for the mobile terminal, and seamless mobility, including between 


different radio-access technologies [2]. 


Release 8 of 3GPP standards provided enhancements to the existing Universal 
Mobile Telecommunications System (UMTS) with the specifications for LTE and the 
System Architecture Evolution (SAE). SAE represents the non-radio aspects of the 
complete LTE system and focuses on the end goal of a packet-switched core to support 
packet-switched radio access. This flat IP-based network architecture ensures mobility 
between existing mobile telecommunication systems (e.g., GSM, UTRAN, Wi-Fi, and 
WiMAX) and replaces the General Packet Radio Service (GPRS) core network for 2G 


and Wideband Code Division Multiple Access (WCDMA)-based 3G _ networks. 
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Together, LTE and SAE comprise the Evolved Packet System (EPS), where all voice and 


data services over the air interface are fully packet-switched versus circuit-switched. 


In December 2008, 3GPP froze the Release 8 standards, allowing production of 
equipment based on LTE and network deployment to begin. 3GPP published Release 9, 
freezing its specifications in December 2009, and development of Release 10 is currently 
in progress. Release 10 will give the world LTE-Advanced, a further evolution of LTE 
that will meet the requirements of a true 4G network as outlined by the International 
Telecommunications Union (ITU) [3]. Assessment of LTE-Advanced against ITU’s 
Radiocommunication Sector requirements occurred on 21 October 2010 and was 
accorded the official designation of an International Mobile Telecommunications- 


Advanced (IMT-Advanced) 4G technology [4]. 


Despite a lack of true 4G status, LTE networks based on the Release 8 
specifications deployed around the globe. The first available networks appeared in 
Stockholm, Sweden and Oslo, Norway during December 2009. In North America, 
wireless carrier MetroPCS deployed LTE networks in Las Vegas, Nevada and Dallas/Fort 
Worth, Texas by the end of September 2010. Well-known carriers Verizon Wireless and 
AT&T embraced LTE as the future of their networks and continue to conduct testing 
within the United States. With the requirement of backwards compatibility for LTE- 
Advanced imposed by 3GPP, existing LTE networks anticipate cost-effective upgrading 
to the Release 10 standards in the future. The map in Figure 1 displays LTE network 
deployment across the globe, with red markers indicating countries that have carriers 


committed to establishing LTE networks and blue markers indicating actual deployment 


[S]. 





Figure 1. LTE Forum LTE Deployment map (From [5]). 


LTE stands upon the brink of revolutionizing the current mobile 
telecommunications infrastructure. It has been embraced around the world by numerous 
wireless carriers as the answer to evolving their existing 3G networks and demanded 
attention from industrial partnerships already involved with other 4G technologies like 
WiMAX. This merits continued exploration of the specifications and protocols of LTE in 


the foreseeable future. 
B. OBJECTIVE: GEOLOCATION 


The ability to locate subscribers within a network remains a key element in past 
and future mobile telecommunication services. From an operational perspective, a 
mobile network would not be “mobile” if the location between subscriber stations (SS), 
which is synonymous with mobile stations (MS), and base stations (BS) could not 
identify its initial location followed by constant updating while the SS is on the move. 
This necessary functionality facilitates the success of location-based applications on 
cellular phones. Consumers use their mobile devices for navigation, weather 


information, traffic status and social-networking features such as identifying friends in a 


shared area. These services demand accurate determination of SS location in order to 


provide the requested information to the consumer. 


Subscriber location capability proves an invaluable asset to emergency response 
teams and law enforcement. Situations occur where a person in distress may require 
immediate assistance and not have any knowledge of his or her precise whereabouts. 
Another situation could involve a perpetrator, sought out by police, who actively uses his 
or her cellular device. Both cases can have quicker outcomes provided the location of the 


SS can be obtained. 


In 2003, Congress mandated that mobile carriers be required to provide accurate 
location information for the origins of 911 calls from mobile phones to allow response to 
such situations [6]. The FCC Public Safety and Homeland Security Bureau announced 
plans for a new 700 MHz public-safety radio band in August 2009 and identified LTE as 
the proposed technology to be used [7]. These demands validate the objective of this 
thesis, which is to develop a method to geolocate LTE subscribers and assess the fix 


accuracy that can be achieved using this technique. 
C. RELATED WORK: METHODS OF GEOLOCATION 


Different methods exist to provide location information on wireless devices. 
Many of these methods depend upon the nature of the technology employed by mobile 
carriers. The methods can be narrowed further when a choice must be determined 
between location capability built within a mobile device or reliance on external means 


based on the network on which the device operates. 


A global positioning system (GPS) chip represents an example of an internal 
capability solution for geolocation. The addition of a GPS chip in a wireless handset can 
provide accurate location information as well as satisfy the Congressional requirement 
concerning 911 emergency calls from the device. As reliable as GPS has been proven to 
be, there remain significant drawbacks to its use with a wireless handset. Higher rates of 
power consumption would occur due to the necessary transmission increase of data 
coupled with energy requirements for the GPS chip itself. Another drawback lies in the 


cost increase to manufacture mobile devices with onboard GPS. Disabling or failure of 
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the GPS on the handset could lead to detrimental situations, especially during a 911 
response or a law-enforcement pursuit where accurate location is vital. Mitigating these 
drawbacks is possible through use of external approaches to geolocation. While they 
may not provide location results as precise as GPS, external methods overcome the 
obstacles presented with power, cost, and bandwidth. External methods also ensure 


redundancy by continuing to provide location information should the GPS capability fail. 


Several possible passive external techniques exist to locate a radio frequency (RF) 
device, including received-signal-strength indication (RSSI), angle-of-arrival (AOA), 
time-difference-of-arrival (TDOA), frequency-difference-of-arrival (FDOA), or potential 
internal signal characteristics [8],[9]. Multipath and variable broadcast strength pose 
limits on reliable location acquisition when directly applying RSSI. FDOA provides 
accurate location for platforms such as aircraft but requires significant relative motion to 
generate Doppler shift. Therefore, it is inadequate for terrestrial geolocation. For 
locating an LTE subscriber, implementing acquisition schemes based on AOA, TDOA, 


and signal internals remains the best possibility. 


Existing mobile carriers have already proven means of geolocation for their 
specific network technologies based on AOA, TDOA, and signal internals or a 
combination of them. The nationwide time-division multiple access (TDMA) and GSM 
mobile carriers use network-based location schemes. Access to the shared spectrum is 
controlled by timing data built into the structure of TDMA and GSM signals, allowing 
carriers like T-Mobile and AT&T Mobility to use TDOA methods. Providers using code 
division multiple access (CDMA), such as Verizon Wireless and Sprint, use an assisted 


GPS method with their mobile devices. 


GSM provides an internal parameter to TOA within its signal characteristics 
known as timing advance (TA). Timing advance is used by the network and handset to 
align the traffic bursts with the TDMA frames of GSM. Using this timing advance and 
speed of propagation, we can approximate range rings from base station towers, and the 
intersection of these range rings from multiple towers provides an approximate location 


for the mobile station [10]. An illustration of overlapping timing advance range rings 1s 


shown in Figure 2 [8]. Further refinement of this approach found averaging multiple 
timing advance measurements minimized error in random variable sampling, tightening 


location accuracy [11]. 





Figure 2. Illustration of overlapping timing advance range rings (From [8]]). 


Similarities to this signal characteristic exist in the IEEE 802.16 standards for 
Worldwide Interoperability for Microwave Access (WiMAX), a technology competing 
with LTE for 4G status. The uplink in the 802.16 medium access control (MAC) 1s also 
shared between SSs in a TDMA fashion, with initial assignment of timing adjust 
generated by the BS after the initial entry and ranging request by a SS [12]. An 
investigation of the same approach, using radial distances from multiple BS based on the 
WiMAX timing adjust, yielded the possibility of location fixes with 10 times greater 
accuracy than previous results in literature applying timing advance techniques to GSM 


networks [8]. 
D. APPROACH 


3GPP incorporates a timing advance function similar to GSM and timing adjust in 
WiMAX. If the timing of a specific terminal needs correction, the network issues a 
timing advance command for this specific mobile terminal, instructing it to retard or 
advance its timing relative to current uplink timing. The user-specific timing advance 
command is transmitted as a MAC control element on the downlink-shared channel (DL- 


SCH) [1]. The approach to geolocation in this thesis uses the same location-deriving 
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principles employed through previous WiMAX research; knowledge of the signal 
internals in relation to timing data in order to isolate subscriber station position based on 


radial distances to known base station locations is used. 


First, investigation of the 3GPP standards was conducted to establish where the 
timing data resides within the signal internals, what packets contain the timing data, and 
how the timing data is calculated. The results of this investigation were compared to 
other sources for validity and correctness. Due to a lack of testing equipment software 
and field-testing facilities with an established LTE network, computer simulation was 
used to test TA-constrained behavior with multiple base stations under variable 
conditions, such as random distances and angled placement. Accuracy of location 
acquisition based on the TA ranging parameter in LTE networks was established based 


on the results of these computer simulations. 
E. THESIS ORGANIZATION 


Investigation of the 3GPP standards for LTE begins in Chapter II. Exploration of 
the physical channels and modulation, physical layer procedures, and initial network 
entry access identify proper extraction of TA data. The methods of approximation to 
establish geolocation with supporting mathematics are described in Chapter HI, and 
computer simulation based on a two-dimensional model with variable constraints is 
conducted. The simulations use a Monte Carlo test scheme to establish fix accuracy in 


real-world LTE networks. 


After exploration of a two-dimensional geolocation method, the  three- 
dimensional problem with TA, where the extracted TA value correlates to an angled 
distance between the subscriber station and the base station, is addressed in Chapter IV. 
Methods of approximation and calculations through mathematics are discussed, followed 
with Monte Carlo computer simulations that encompass three-dimensional aspects. 
Finally, conclusions on the overall simulation results and recommendations for furthering 


and refining this research are discussed in Chapter V. 
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I. INVESTIGATION OF LTE WORKINGS 


LTE intends to deliver superior performance compared to existing 3GPP networks 
based on High Speed Packet Access (HSPA) technology. Performance targets based on 
peak user throughput should be minimum 100 Mbps in downlink and 50 Mbps uplink, 
which is ten times more than previous released HSPA technology from 3GPP. With this 
capability, LTE proves to be a more than suitable platform for Internet protocol (IP) 
applications at the upper levels of the protocol stack such as large data transfers and voice 
over IP (VoIP). Other performance targets with LTE include transmit round trip time 
less than 10 ms, optimized terminal power efficiency, and bandwidth flexibility ranging 
from below 1.5 MHz up to 20 MHz allocations. To understand how these performance 
targets are achieved and why a timing advance feature is necessary, an investigation into 


the inner workings of LTE is required. 
A. UPLINK AND DOWNLINK 


LTE relies upon multiple access schemes that allow several subscriber stations, 
referred in the 3GPP standards and throughout the remainder of this thesis as user 
equipment (UE), to share the capacity of the network. Contrary to other existing mobile 
technologies, LTE uses different multiple access schemes for uplink and downlink. They 
are single-carrier frequency-division multiple access (SC-FDMA) and _ orthogonal 


frequency-division multiple access (OFDMA), respectively. 


OFDMA operates on the same principles as traditional frequency division 
multiplexing. Different frequencies can carry different pieces of information. A good 
portrayal of the concept lies with conventional radio, where different stations offer 
different music on different frequencies. A digital modulation technique called 
orthogonal frequency-division multiplexing (OFDM) allows a radio station to use a group 
of frequencies rather than a single carrier. Allotted bandwidth is subdivided into spaced 
frequencies to create a sub-channel. These sub-channels allow simultaneous transmission 
of data in the form of multiple symbols combined via inverse fast Fourier transform 


(IFFT). Closely-spaced orthogonal sub-carriers are then used to carry the sub-channels, 
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one for each carrier, and achieve significant avoidance of inter symbol interference (ISI). 
To accomplish OFDMA, different OFDM sub-channels are assigned to different users, 
improving upon the avoidance of ISI and increasing overall network capacity. 
Parameters for the downlink transmission scheme, including transmission bandwidth, fast 


Fourier transform (FFT) sizes and sampling frequencies, is included in Appendix A [13]. 


There are disadvantages to using OFDM, primarily attributed to the use of allotted 
bandwidth. When tightly packing many carriers in an allotted bandwidth, these narrower 
frequency bands become wider in time. A symbol that is wider in time provides greater 
protection against time-smearing effects of multipath propagation, where the signal is 
received as different reflections and is subject to fading. However, the frequency bands 
suffer from increased sensitivity to Doppler shift as they become narrower and may result 
in nulls failing to align, thereby creating ISI. Another disadvantage of OFDM and 
OFDMA concerns power requirements, since its use generates high peak-to-average- 
power ratio (PAPR). There is little concern for PAPR when discussing the downlink 
side, since an LTE base station, referred in the 3GPP standards and throughout the 
remainder of this thesis as an eNodeB (eNB), can easily receive sufficient power. Rather, 
the problem lies on the uplink side for the UE. In order to compensate for PAPR while 
taking advantage of OFDMA capability, 3GPP instituted SC-FDMA as the multiple 


access scheme for uplink from UE. 


SC-FDMA provides linearity to a pre-coded OFDMA scheme by adding an 
additional discrete Fourier transform (DFT) before the conventional OFDMA processing. 
Multiple access among users requires assignment of different sets of nonoverlapping, 
silent Fourier coefficients at the transmitter prior to the initial IFFT for the OFDMA 
signal. The OFDMA signal now becomes a single-carrier transmit signal and no longer 
requires modulation of multiple sub-carriers by the transmit symbols. The silent Fourier 
coefficients are then removed on the receiver side after the signal runs through the FFT. 
By adding the extra DFT, SC-FDMA reduces the PAPR of the signal. This allows for 
cost-efficient terminal power amplifier design for the UE and directly expands UE battery 


life. 
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An overview of the uplink and downlink schemes described and the functional 
commonality between the SC-FDMA and OFDMA transmit chain is shown in Figure 3 
[14], with white blocks common to both multiple access schemes and darkened blocks 
specific to SC-FDMA only. The constellation mapper converts an incoming bit stream to 
single carrier symbols through modulation. Then the time domain single carrier symbols 
are converted from a serial format to parallel symbol blocks. Next, additional DFT 
combines with the time domain SC symbol blocks to form M discrete frequency tones. 
Output tones for SC-FDMA or the original bit stream for OFDMA are mapped to 
specified subcarriers and applied to an inverse discrete Fourier transform (IDFT). At this 
stage, optimal spacing of the orthogonal subcarriers via a cyclic prefix (CP) is necessary 
to avoid ISI, and pulse shaping prevents spectral regrowth that may occur. Radio 
Frequency Equipment (RFE) converts the digital signal to an analog signal, and the signal 
is transmitted to the destination RFE receiver. For the receive side of the chain, the 


process is essentially reversed, with the end result of the original bit stream. 
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Figure 3. Functional commonality between SC-FDMA and OFDMA signal chains 
(From [14]). 


LTE provides two modes of operation for uplink and downlink sharing the same 
frequency band for transmission and reception: frequency-division duplexing (FDD) and 
time-division duplexing (TDD). The major difference between the two schemes is the 


use of paired and unpaired frequency bands. FDD uses different frequencies on paired 


1] 


bands for continuous UE transmission and reception with reasonable separation between 
downlink and uplink directions. TDD uses the same frequency band for transmission and 
reception but alternates the transmission direction in time with a guard period for 
scheduling. How uplink and downlink are coordinated with the different schemes 1s 
illustrated in Figure 4 [14]. LTE eNodeBs can implement either scheme, but FDD is 
preferred because it provides the maximum achievable data rates. The specifications for 
LTE include FDD and TDD in all of its descriptions since there is little to no difference 
in the physical architecture of the technology, and the procedures are the same. The FDD 


mode of operation is the focus of this thesis. 
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Figure 4. Principles of TDD and FDD modes of operation (From [14]). 


With eNodeBs providing simultaneous transmission and reception with FDD, it 
comes into question why a timing advance feature is required. The timing control 
procedure is needed so that the uplink transmissions from different users arrive at the 
eNodeB essentially within the cyclic prefix. Such uplink synchronization is needed to 
avoid interference between the users with uplink transmissions scheduled on the same 
subframe. The eNodeB continuously measures the timing of the UE uplink signal and 
adjusts the uplink transmission timing as shown in Figure 5 [14]. Timing advance 
commands are sent via random access channel (RACH) only when a timing adjustment is 
actually needed, 1.e., the uplink for the UE is not synchronized. This occurs during 
system access, periods of UE idleness or inactivity, non-synchronized handover from 
eNodeB to eNodeB, and radio link failure. To better realize how these situations occur, 
investigation of the LTE specifications for radio frame structure and timing was 


conducted. 
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Figure 5. Uplink timing control (From [14]). 


B. RADIO FRAME STRUCTURES AND TIMING 


3GPP specification TS 36.211 Physical Channels and Modulation describes 
standard radio frame structures and timing and how they are implemented in LTE for 
uplink and downlink. A standard LTE unit of time used throughout all the specifications 


is given to describe the size of various fields in the time domain, and is expressed as 


T, =1/ (15000 x 2048) sec. (1) 


In Equation (1), 15000 represents the 15 kHz sub-carrier spacing and 2048 is the 
maximum FFT size. Downlink and uplink transmissions are further organized into radio 


frame structures with duration of 7, multiplied by the maximum sampling frequency of 


30.72 MHz. This is expressed as 
T, =307200xT; =10 ms. (2) 


Radio frame structures are further divided by slots. These slots are expressed in 


the time domain as 
T’,,, =15360xT, =0.5 ms. (3) 
Two radio frame structures are supported in LTE, with type 1 applicable to FDD. 
Each radio frame is 7, =10ms long and consists of 20 slots of length 7), =0.5 ms, 


numbered from 0 to 19. Subframes within a frame is defined as two consecutive slots, 
where subframe i consists of slots 27 and 2i+1. The type 1 radio frame structure is 


illustrated in Figure 6 [15]. 


13 


| One radio frame, 7;= 3072007,= 10 ms 
One slot, Ty.¢= 153607,= 0.5 ms 











#0 # | #2 7: ||| Seeaeeioree ts #18 #19 
































One subframe 





Figure 6. Frame structure type | (From [15]). 


TS 36.211 gives an overall description of uplink-downlink frame timing and 


calculates the start time from (N74 + Noy ose, 15. Transmission of the uplink radio frame 7 
from the UE 1s to start (Ny + Nr ose, Ls seconds before the start of the corresponding 
downlink radio frame at the UE, where 0<N,, < 20512, and N,, ,y,.. =0 for frame 
structure type 1 [15]. The uplink-downlink timing relation is demonstrated in Figure 7 
[15]. As for N,,, this corresponds to the number of timing advance units that need to be 


applied to the start times of the uplink and downlink radio frames and gives us a 
maximum of 20512 TA units. The assignment of TA units occurs in the physical layer 


of LTE through use of MAC protocols. 
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Figure 7. Uplink-downlink timing relation (From [15]). 


C. MEDIUM ACCESS CONTROL 


3GPP TS 36.321 Medium Access Control (MAC) protocol specification gives a 
functional point of view for the MAC architecture used in LTE. The MAC provides 
numerous functions to support error correction, scheduling information reporting, and 


priority handling between UEs by means of dynamic scheduling. This latter function is 
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instrumental for solving synchronization situations as previously discussed, where 


adjustment of frame timing for a UE 1s required to join or rejoin the network. 


A MAC protocol data unit (PDU) is a bit string that is byte aligned in length and 
consists of a MAC header, zero or more MAC Service Data Units (SDU), zero or more 
MAC control elements, and optional padding. —The MAC PDU header is further divided 
into one or more MAC PDU subheaders. An example of a MAC PDU is portrayed in 
Figure 8 [16]. 
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sub-header sub-header sub-header sub-header sub-header sub-header 
MAC header MAC Control | MAC Control MAC SDU MAC SDU Padding 
element 1 element 2 (opt) 
~<« MAC payload > 
Figure 8. Example of MAC PDU consisting of MAC header, MAC control 


elements, MAC SDUs and padding (From [16]). 


In cases where a UE uses the RACH for joining or rejoining the network, an 
eNodeB responds with a MAC PDU that substitutes MAC Random Access Responses 
(RAR) as the MAC control elements to synchronize the UE. This variation of the MAC 
PDU 1s illustrated in Figure 9 [16]. 
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Figure 9. Example of MAC PDU consisting of MAC RARs (From [16]). 


The MAC RAR, displayed in Figure 10 [16], consists of six octets divided into 
four fields: a reserve field of | bit set to 0, Timing Advance Command, an Uplink Grant 
field to indicate resources available to the UE, and a Temporary Cell Radio Network 
Temporary Identifier (C-RNTI). The timing advance command field is used to indicate 
the amount of timing adjustment that UE has to apply. The field comprises bits [6:0] in 
the first octet of the MAC RAR and bits [7:4] of the second octet, for a total of 11 bits. 


The specifications define these 11 bits to indicate the index value of T,, ranging from 0 


to 1282. Therefore, the maximum 7, is represented by a binary 10100000010 for 


decimal 1282. 
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Figure 10. MAC RAR (From [16]). 
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After the UE successfully joins or rejoins the network, communication between 
the UE and the eNodeB moves from the RACH and now resides on the uplink shared 
channel (UL-SCH) and DL-SCH. As the UE changes distance between itself and the 
eNodeB, timing advance may need to be adjusted from its initial indication in the MAC 
RAR to compensate. The timing advance control element is identified by the MAC PDU 
subheader with the logical channel ID (LCID) field shown in Figure 8. This field, 
illustrated in Figure 11 [16], 1s one octet long, with the two most significant bits as 


reserved bits set to 0, and the remaining 6 bits to indicate index values of T, adjustment 


ranging from 0 to 63. 





ee 
R | R | Timing Advance Command | Oct 1 




















Figure 11. Timing Advance Command MAC control element (From [16]). 


D. TIMING ADVANCE CALCULATIONS 


3GPP TS 36.213 Physical layer procedures [17] give further refinement on 
transmission timing adjustments, where the timing advance command indicates the 


change of the uplink timing relative to the current uplink timing as multiples of 167. In 
case of RAR, 11-bit timing advance command 7, indicates N,, values by index values 
of 7,= 0, 1, 2, ..., 1282, where an amount of the time alignment is given by 
Ni. =T, x16. In other cases, 6-bit timing advance command 7), indicates adjustment of 


the current N,, value N. 


rao tO the new 7, value N. 


TA,new 


by index values of T, = 0, 1, 2, 
..., 63, where Noy iy, = Nr og + Ty, —31) x16. Here, adjustment of N,, by a positive or 


negative amount indicates advancing or delaying the uplink transmission timing by a 
given amount, respectively. The specification goes on to describe how timing advance is 
applied to the 10 ms radio frame in Figure 6. For a timing advance command received on 
subframe n, the corresponding adjustment of the timing applies from the beginning of 


subframe n+6. 
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With all the necessary parts of timing advance in LTE explained, calculation of 
time and distance with respect to one unit of TA can be achieved. Review of the 


literature suggests a common statement with the maximum 7’, = 0.67 ms correlating to a 


radial distance just over 100 km from the eNodeB to the UE. To verify this statement, 


knowledge of the maximum index values for 7, and employment of (4) were used. For 
example, an RAR message is received with the maximum index value 7, =1282. 
Application of this to N,, yields N,, =T, x16 =1282x16=20512, the maximum JN, 


for radio frame type |. Substituting this value in (4), we get the expected maximum 


result from literature [1] 


(Noy + Nora oyser) XT = (20512 + 0) x1/ (15000 2048) = 0.67 ms. (4) 


The distance in meters per unit of TA can be derived with knowledge of the 
sampling frequency in LTE. Sampling frequencies for different transmission bandwidths 


in LTE are indicated in Table 1 as multiples of 3.84 MHz. By multiplying the reciprocal 
of the sampling frequency1/F, by the speed of light, approximately 3x10° meters per 


second, each unit of TA should correlate to a distance of approximately 78.125 meters. 
In regard to the example above, a maximum index value of 1282 units of TA multiplied 


by 78.125 meters produces 100.156 km, validating the assertion found in literature. 


The specifics of LTE network communication was investigated in this chapter and 
specific parameters of interest were identified. Initial joining or rejoining of a UE to the 
network provides responses from the eNodeB with timing adjustment instructions based 
on distances between them and further adjustments based on the change in distance due 
to UE mobility. These instructions are facilitated through MAC protocol internals as 
deemed necessary by the eNodeB. TA is able to be resolved to distance and allows for a 
radial distance from the eNodeB to be calculated. This distance can be applied to 
geolocation with use of intersecting radii, which was introduced in the previous chapter. 
With detailed knowledge of bit specifics from the standards, computer simulations to 
provide estimates of geolocation accuracy in variable networks with multiple eNodeBs 


are documented in the next chapter. 
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Hil. TWO-DIMENSIONAL SIMULATIONS 


A. METHOD OF APPROXIMATIONS 


The initial approach to simulating geolocation of an LTE UE requires 
establishment of parameters to be used. First, the simulation employs a flat Earth model 
with calculations derived in Cartesian coordinates. This provides for a meter-by-meter 
coordinate system with simplified calculations of range radii, intercept points and 
probability polygons. Rather than explore a spherical model with latitudes and 
longitudes, the typical error over the geode due to curvature in this flat Earth model 
remains small, even after mapping the results to the Earth’s surface with a coordinate 


transformation. 


Second, the method of intersecting radii is based upon propagation delay acquired 
from signal internals. Assuming free space propagation at the speed of light, 
approximately 3x10° meters per second, at the bandwidth used, each unit of TA 
increases the range radius from the eNodeB by 78.125 meters, as discussed in Chapter II. 
Calculations of range radii assume a best case scenario with an absolute TA amount of 


78.125 with no variance and deviation in the measurement. 


The third parameter offsets the best case scenario by introducing deviation into 
the range radii calculations. Investigation into the LTE signal internals to this point have 
been limited to values and calculations derived from the specifications. As previously 
discussed, a lack of LTE-capable signal analysis equipment and field testing facilities 
prevented any real-world, real-time collection of TA data. Regardless of a high degree of 
confidence in the calculations for TA, it would be unrealistic to assume there would be no 
deviation from the mean 78.125 meters when analyzing an LTE signal retrieved from the 
air. Since it was not possible to establish a real-world value for deviation or blindly 


accept that there would be deviation present, the simulation required multiple runs. 
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The first run maintained a mean value of TA with 78.125 meters as derived from 
calculations. The second run introduced two forms of standard deviation based on 


measurement error and quantization error. 


Measurement error used in the simulations is based on the results of previous 
research on geolocation with WiMAX. In this research, field collection results of 
successful TA data extracted from the air interface were combined into a single 
probability density function (PDF) and established an overall standard deviation of TA to 
be 0.673 meters [8]. To mimic this finding, a randomly selected standard deviation of 0.5 


meters 1s used to introduce measurement error per unit of TA. 


Quantization error is based on the radii from each eNodeB consisting of multiples 


of TA equal to a uniform distribution of +78.125 meters. Therefore, a change in the 


radius Ar will have a range of ~78.125/ <O< 78.125/ meters, as depicted in Figure 12. 


The probability of Ar is 








l 
P(Ar) = 5 
a 78.125 ~ 
Solving for the variance, we have 
78.125/2 
o° =E| (Ar-0y |=2 | Ar? x P(Ar)dx 
0 
3 
_ 2 <5{ (6) 
78.125 3 2 
= 508.6 . 


From this variance, a standard deviation of TA due to quantization error can be 
established as 0 = 22.5 meters. For simulation purposes, a quantization error equal to 
TA, 78.125 meters, is multiplied by a uniformly distributed random number between zero 
and one and then added to calculated radii. A bias equal to half the quantization error, 


39.0625 meters, is subtracted from the end radii result. 
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Uniform Olatribution Behavior of Delta Radius Based on TA=F6.175 Meters 
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Figure 12. Uniform distribution of Ar. 


B. LIKELY LOCATION CALCULATIONS 


With two eNodeBs having a known generated radius, the most likely location of a 
UE would lie where the radius rings overlap or the point where they are closest to 
overlapping. Three situations must be accounted for: two radius circles can be separated 
without touching, one radius circle can be completely contained in the other, or the radius 
circles intersect. Overlapping radius circles generated from two eNodeBs results in two 
points of intersection, with only one of the points representing the true coordinate 
solution to the most likely UE location. The addition of a third eNodeB will almost 
always remove the ambiguity between the points of intersection based on the fact that all 
three radius circles only converge near one of the two intersections from the two eNodeB 
solution. The decision process between the three possible situations is illustrated in 


Figure 13. 
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Figure 13. Decision process for geolocation method of intersecting radii. 


For two eNodeBs generating intersecting radii, the best possible location 
approximation occurs when the two points of intersection get closer and closer together, 
eventually converging on one point. Radius circles that are barely touching or separated 
by a very small distance can still provide an accurate approximation despite the fact that 
they do not intersect. However, the increase in distance between nonintersecting radii is 
directly proportional to the amount of error in the approximation, making the estimate 


less and less meaningful as the radii become farther apart. 


Using the decision process displayed in Figure 13, we obtain the distance between 
the eNodeBs using the Pythagorean Theorem based on their X-Y plane coordinates and 
compared to the sum and difference of their radii. The result of the comparison 
determines which of the three situations has occurred. If the sum of the radius circles is 
less than the total distance between the two eNodeBs, then a case of nonintersecting radii 


has occurred. Therefore, the approximated UE location becomes the midpoint of the total 
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distance plus an approximation radius based on a scaling factor and the distance between 


the two radius circles along the same line of distance. 


When the absolute value of the difference of the radius circles equates to 
something greater than the total distance between the eNodeBs, one radius circle 1s 
completely contained within the other. As long as the eNodeBs are not located on the 
same point, preventing any indication of direction between the two, drawing a straight 
line through the sites on both sides will provide the maximum and minimum separation 
of the radii. The approximated UE location becomes the midpoint between the inner and 


outer radius circles at the point of minimum separation. 


If the radius circles are not completely separate or contained one within another, 
then they intersect. There is a greater chance of two points of intersection and rarely will 
the radius circles intersect on one specific point. The most accurate method of 
approximating the UE location in this case is with triangles rather than mapping all points 
along both radius circles in an attempt to find the closest pair. The use of triangles to 


calculate the intersections of circles is illustrated in Figure 14. 


Point-ot Intersection 





Figure 14. Use of triangles to calculate intersection of circles. 
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Based on the radii generated from the eNodeBs and the total distance between 
them, the law of cosines can be used to determine the distance to the middle of the 
overlapping portions of the radius circles. Derivation of this distance requires application 
of the Pythagorean Theorem with the given information already known, such as each 
hypotenuse corresponds to each radius and each triangle base, or adjacent side, is the total 
distance between the eNodeBs minus the distance from the midpoint to the opposite 
eNodeB. Both triangles share the last, or opposite, side. This yields a solution for both 
triangles for the shared side. The two equations are equated and solved for the distance 


from either eNodeB to the midpoint. 


Knowledge of the midpoint provides a line through the two intercept points that is 
perpendicular to the distance line between the eNodeBs. With the derived base distance 
and the hypotenuse, the triangles can now be solved completely to find the distance from 
the midpoint to the intercept that was previously eliminated when the two equations were 
equated. It is now feasible to calculate the intersect points relative to the midpoint or the 


corresponding eNodeB. 


To elaborate in terms of Cartesian coordinates, an eNodeB at the origin and 
another eNodeB a distance D along the X-axis, the X-coordinate for both intersection 


points is calculated using the inter-site distance D and the radii R from 


R°-R,+D 
Yo (7) 
2D 
With Pythagorean Theorem, the Y-coordinates for the intersections are derived as: 
(3) 





The case of intersecting radii forms probability ellipses in one of two ways, either 
overlapping radii from within due to the centers of both circles contained in the larger 
radius, or two circles overlapping from the outside. Overlapping radii from the outside 


gives a more reasonable approximation when dealing with only two eNodeBs. In both 
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situations, the approximation lies on the midpoint of the ellipse, where the major axis is 
the distance between the intercepts and the minor axis is the distance between the radius 


circles. 


To demonstrate the potential for geolocating a UE within a real world LTE 
network, software-implemented simulations were produced using MATLAB. Multiple 
eNodeB scenarios were simulated with the mean distance per unit of TA of 78.125 
meters derived from calculations. The same scenarios were then executed a second time 


with the application of standard deviation and compared against the first run. 


C. TWO BASE STATION SIMULATION 


The first simulation uses the algorithm presented with two eNodeB radii to 
approximate the location of a UE. In all cases, the UE’s true location is the origin on the 
X-Y plane. The simulation creates two eNodeBs at varying degrees in relation to the UE, 
each with normally distributed random distance with a mean of one kilometer from the 
UE, standard deviation within a range of 300 meters, and TA per the calculated value of 
78.125 meters. Since the value of TA is discrete, the eNodeB rounds the radial distance 
to a whole unit of TA. A Monte Carlo simulation of one hundred thousand iterations was 
conducted for each increment of ten degree angles from 0 degrees to 180 degrees. The 
average distance from the center of the approximation polygon, 1.e., the midpoint 
between the two radius circle intersections, to the actual UE location for each separate 


run was recorded. 


The most accurate approximation of the UE location occurs at 180 degrees when 
the placement of the eNodeBs and the UE form a straight line with one another. As the 
angle decreases, the approximation error increases due to the two intersections of the 
radii becoming farther and farther apart. The ambiguity as to which intersection 
represents the UE location causes the approximation midpoint between the intersections 
to increase in distance from the actual UE. It remains true that one of the intersections is 
always close to the actual UE location, but the algorithm itself cannot differentiate 
between the two without some outside-assisted prior knowledge. There comes a point in 


the simulation where, as the angle continues to decrease, the approximation error 


ZS 


stabilizes and begins to decrease. This is due to the angle between the eNodeBs 
approaching zero, and the UE and eNodeBs are again in a line with each other. The 
overall approximation error results of the two eNodeB simulation are displayed in Figure 


15. 
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Figure 15. Approximation error analysis of two eNodeBs varying angle simulation. 


The simulation was repeated with the addition of TA standard deviation from 
measurement error ranging to 0.5 meters and quantization error ranging to 78.125 meters. 
The intent was to introduce fluctuations in the TA measurements and required a 
modification to the radii derivation in the MATLAB code. The eNodeB rounds the radial 
distance to a whole unit of TA as before and then adds a normally distributed random 
error factor based on the 0.5 meter standard deviation. Once the site radii is calculated, a 
quantization error of 78.125 meters multiplied by a uniform randomly distributed number 
between zero and one is added to the radii length, followed by an additional bias of half 
the quantization error, 39.0625 meters, which is subtracted from the end result. This 
creates a higher percentage of radii that are greater in distance than the previous random 


radii generated in the first run. As a result, the approximation error increased slightly. 
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However, the approximation error followed the same line of distribution as the last 
simulation despite the addition of standard deviation. The approximation error results 
with standard deviation applied are shown in Figure 16. Sample plots generated during 
the two eNodeB simulation, showing results at varying angles between the eNodeBs, are 
contained in Appendix B. 
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Figure 16. Approximation error analysis of two eNodeBs varying angle simulation, 
standard deviation applied. 


D. MULTIPLE BASE STATION SIMULATION 


The second set of simulations conducted in MATLAB explores geolocating a UE 
with more than two eNodeBs available. The introduction of a third or more eNodeB 
radius circle offsets the limitations presented in a two eNodeB approximation estimate by 
removing the ambiguity between the two points of intersection and their relation to the 
actual UE position. Thus, a more accurate position estimate on the actual UE location 


can be derived. 


ZT 


The approach to the multiple eNodeB simulation uses the same algorithm 
presented in the previous simulation. The intersections of each eNodeB radii are 
calculated and each intersection compared to the closest intersection of the next pair of 
radii. Once found, the closest intersection coordinate points are added to an array, and 
the process repeats for the remaining pairs. The completed array of closest intersections 
forms the vertices for a small polygon correlating to the approximation point of the UE. 
Using a three-eNodeB network as an example, we derived three pairs of intersections for 
a total of six points of intersection. The three closest intersection points are chosen, 
which when plotted should form a small triangle near the true UE location. The exact 
shape and number of vertices of this polygon is unknown. Therefore, to calculate the 
approximation point, the coordinate values of X and Y for the chosen intersections are 
averaged together, respectively, to find the approximation point coordinates on the X-Y 


plane. 


Different scenarios involving the placement of the eNodeBs were explored using 
this algorithm. The first scenario used random placement of the eNodeBs at varying 
angles from the actual UE and normally distributed random distances of 1.2 kilometers 
with a standard deviation of 400 meters. A Monte Carlo simulation of 100,000 iterations 
was performed for each increment in the number of eNodeBs, ranging from three to ten. 
In the same manner as the two-eNodeB simulation, the average distance from the 


approximation to the actual UE location for each increment of eNodeBs was recorded. 


This completely random placement scheme of eNodeBs presented rare cases 
where a three eNodeB network produced a very inaccurate approximation estimate due to 
the third radius circle intersecting the other two circles at the same or near-same points. 
When this happens, the three-eNodeB network essentially devolved into a two-eNodeB 
network and was subjected to the approximation errors created with varying angles 
discussed previously. The case of a three-eNodeB network devolved to a two-eNodeB 
network with ambiguity due to unfortunate geometry, where eNodeB towers are 
represented with triangles, diamonds for the chosen points of intersection, a star for the 
estimated location, and a square indicating the actual UE location, are illustrated in 


Figure 17. 
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Figure 17. Inaccurate approximation situation with a 3 eNodeB network. 


The next scenarios explored eNodeB placement with nonrandom distribution. 
Real world networks tend to follow some form of structure in their base station layout 
based upon maximum coverage with the fewest amounts of towers in support of 
subscriber density for different areas. The individual topography of these areas can 
prevent exact alignment to the structure, but towers are still generally spaced to support 
the area’s required demands. Two models were used to simulate structured eNodeB 
placement. First, the eNodeBs were placed with evenly spaced, fixed angles between 
them, based on the number of eNodeBs in the network, and the inter-site distances 
remained randomly distributed. The next model used the same even angle placement, but 


all eNodeBs at a fixed range of one kilometer from the UE. 


All three scenarios were initially simulated in the Monte Carlo fashion of 100,000 
iterations per each incremental number of eNodeBs, ranging from three to ten and using 


the radial distances generated from TA calculations without any standard deviation 
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applied. As expected, the structured scenarios provided greater approximation accuracy 
than the randomly placed eNodeB scenario, as shown in the overall results displayed in 


Figure 18. 


Returning to the issue of devolving three-eNodeB networks, we reiterate the 
importance of the fact that the approximation estimates are averages from all iterations of 
each particular geometry case. Some estimates that are hundreds of meters off are 
averaged along with very accurate results, which can be seen with the large location 
estimate error for a three-eNodeB network in Figure 18. Despite the overall average 
estimate between the approximation and the actual UE location as 68 meters, the 
simulation results in a greater number of accurate fixes than the unfortunate geometry 
cases like Figure 17. Sample plots from the multiple-eNodeB simulations, including an 
accurate three-eNodeB network that approximates the location of the UE within 5 meters, 


are contained in Appendix B. 


Based on the results presented in Figure 18, the structured networks show error 
estimates less than 25 meters. The scenario with evenly spaced angles and fixed radial 
distances produced estimates with no significant error. An enhanced view of the error 
results is shown in Figure 19, and an interesting occurrence of greater degree of accuracy 
with even-numbered eNodeB networks is displayed. Expecting real-world networks to 
fall somewhere between structured and completely random geometries, we are safe in 
assuming UE location approximations to result on the average to less than 40 meters. 
Sample plots generated from the different multiple eNodeB simulations, with estimate 


errors well within the 40 meters average, are presented in Appendix B. 
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Figure 18. Average Distance from Estimate to UE with Multiple eNodeBs. 
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Figure 19. Error analysis of multiple eNodeBs with even angles and fixed radial 
distances. 
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A second simulation of the three scenarios was performed, this time with the 
randomly selected TA measurement standard deviation of 0.5 meters, quantization error 
of 78.125 meters, and bias of 39.0625 meters. This increase in radial distances resulted 
in larger approximation errors across the board, as expected. The results, which follows 
the same distribution in the previous results, are displayed in Figure 20. The scenario 
with evenly-spaced eNodeBs at fixed distances produces errors that are not nearly as 
accurate as the simulation without TA standard deviation. Regardless, the approximation 
error falls within 40 meters for the most ideal network geometry. Again taking into 
account that real-world network geometries fall between ideal and random tower 
placement, as well as the high likelihood that TA variations will exist, location estimate 


errors fall on the average to less than 90 meters away from the actual UE location. 
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Figure 20. Average distance from estimate to UE with multiple eNodeBs, standard 


deviation applied. 
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For further analysis of the collected data, the same scenarios can be compared 
with circular error probability (CEP), where the radius within which 50 percent of the 
samples lie is assessed rather than using the average total distance from the 
approximation to the actual UE location. Essentially, the median value of the 100,000 
iterations is used versus the mean average of all iteration results. The CEP for the same 
scenarios as before is shown in Figure 21. The CEP results for the same scenarios are 
displayed in Figure 22, but standard deviation applied to TA and radii is included. The 
same distribution trends based on the random and ideal scenarios are seen when 
analyzing the results, but the circle containing 50 percent of the estimates has a smaller 


radius than the average distance to the estimates calculated. 


CEP Estimate Error with Multiple eNodeb 
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Figure 21. Circular Error Probable from multiple eNodeB simulations. 
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CEP Estimate Error with Multiple eNodeB 
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Figure 22. Circular Error Probable from multiple eNodeB simulations, standard 


deviation applied. 


Comparing the CEP results based upon the presence or lack of standard deviation 
and assuming that accurate eNodeB locations are known, we are safe in assuming that in 
more than 50 percent of all cases, a UE can be accurately located within 60 meters using 


a two-dimensional mapping scheme. 


Calculations derived from LTE specifications to computer-simulated LTE 
variable networks portrayed within a two-dimensional mapping were applied in this 
chapter. With Monte Carlo simulation schemes, computer models revealed that when 
using average distance from an approximated position to actual UE location or CEP as a 
measure, an LTE UE can invariably be located within the distance per unit of TA, less 
than 60 meters from the true position. Excellent location capability, suitable for mobile 
location requirements delineated by organizational entities discussed in Chapter I, were 
shown by the simulation results. Geolocation of an LTE UE using a three-dimensional 
model, discussion of the relationship of TA generated radii between a UE and eNodeB 
with a third-coordinate system, and application of these aspects using computer 


simulation are investigated in the next chapter. 
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IV. THREE-DIMENSIONAL SIMULATIONS 


A. METHOD OF APPROXIMATIONS 


When locating a point on the earth, one generally thinks in two dimensions. 
Longitude and latitude, the military grid reference system (MGRS) and other map datum 
depict a location in terms of two variables. However, the truth of the matter is the 
eNodeB and UE are calculating a TA-based radius with a three-dimensional distance, 
which proves longer than the two-dimensional distance. As the elevation, or Z-axis, 
between a UE and eNodeB varies so does the error [18]. This is best illustrated by a 
simple triangle, as shown in Figure 23 (After [18]). 


eNodeB 
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Figure 23. Illustration of difference between 2D and 3D ranges (After [18]). 


In no way does the addition of the Z-axis variable for height suggest the two- 
dimensional mapping with known TA investigated in Chapter III was not a viable 
solution to geolocating an LTE UE. On the contrary, the method of approximation for a 
two-dimensional solution using only the X-Y plane poses little difference to 
approximating a three-dimensional solution on the X-Y-Z plane. The same method of 
trilateration can be employed. However, where the two-dimensional simulation method 
used the geometry of triangles for determining relative location approximations, three- 
dimensional trilateration requires the geometry of spheres. This technique is employed 


by GPS, where satellites in space essentially act as the center points for spheres with a 
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radius equal to the distance between the satellite and the GPS device requesting location 
updates. The estimated point of intersection of three or more satellite spheres represents 
the likely location of the GPS device, just as the intersection points of circles can estimate 
a probable location. For the purposes of geolocating an LTE UE, the height of an 
eNodeB is accounted for on the Z-axis, where the top of the tower represents the center 
point of a sphere, with the TA-based distance between the UE and the eNodeB as the 


radius. 


The three-dimensional approach to simulating geolocation of an LTE UE uses the 
same parameters established for the two-dimensional simulations. The simulation 
employs a flat Earth model with calculations derived in Cartesian coordinates. Radi 
from the eNodeB to the UE continue to assume free space propagation at the speed of 
light and each unit of TA increases the range radius from the eNodeB by 78.125 meters. 
Best case scenarios assume calculations of range radii based on an absolute TA amount 
of 78.125 meters, and secondary runs of the simulations offset the best case scenario by 
introducing a randomly selected measurement standard deviation of 0.5 meters to the TA 


values, 78.125 meter quantization error and 39.0625 meter bias to the radii. 
B. LIKELY LOCATION CALCULATIONS 


On the two-dimensional plane, the three situations with radius rings that must be 
accounted for included two radius circles separated without touching, one radius circle 
completely contained in another, and radius circles that intersect. The same situations 
apply when using two spheres. However, when two spheres intersect, the addition of the 
third plane introduces a vast number of shared intersection points in contrast to two 
circles only having two points of intersection. Therefore, the addition of a third sphere is 
necessary to calculate a shared intersection point that correlates to the actual UE position 


for all situations. 


Using the Pythagorean Theorem and the law of cosines as before, we found the 
spheres from the eNodeBs using the TA-based radii, the X-Y plane coordinates of each 
eNodeB, and the height of the eNodeB on the Z-plane. This results in a system of 
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equations that can be used with linear algebra to determine the most common point of 


intersection corresponding to the actual UE location. 


To elaborate, in terms of Cartesian coordinates, four spheres equate to a system of 


four equations: 


(x-m) +(y-y,) +(z-4) =R? 
(x-x,) +(y-y) +(z-%) HRY (9) 
(x-x,) +(y-y3) +(2-%) =R 
(x-x,) +(y-y,) +(2-%)° = Ry. 


Points (x, y,,Z,)5(%+¥25Z)> (43593523), and (x,, y,,Z,) correspond to the center 
points of the four spheres calculated with the law of cosines and their associated radii R,, 
R,,R,,and R,, respectively. After substituting values for center point coordinates and 


radii, we further reduced the system by subtracting the equation for the first sphere from 


the equations of the remaining three spheres. The reduced system can now be expressed 


as: 
(x, —x,)x+(y, — y,) yt(Z ~z) z=d, 
(x, -%)’x+(y,-y,Y y+(%-%,) z=, (10) 
(%, —x,)x+(y, — y,) yt(z, ~z) z=d, 

where 


2 2 2 2 2 2 2 2 
Gah Hh AG eG Sy ye, 

2 2 2 2 2 2 2 2 
Opa, SR a ea a ey Oe (11) 


2 a ae ee 
d,=R° — RY - x +x — yy + Ye —Zy +2, 


To find the common point of intersection from (10) and (11), the use of matrices 
in the form of Ax=b can be employed, where matrix A encompasses the coefficients 
from (10), vector b holds the constants from (11), and vector x contains the unknown 


coordinates for the intersection (x, y, z). This is visualized as 
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(x, —%x,)° On y,)° (233 Zy. X d, 
(x,—x,)° (y3-y,)° (z,- 2)" | d, . (12) 
(x, —x,)° (y,-y,)° (Z,—2,)° & d, 


With (12), the unknown point of intersection in vector x is simply the inverse of 


the coefficient matrix A multiplied by the constant vector b, x = A“b. 


As efficient and simple as this likely location calculation may be, there still 
remains the potential for the calculations to go awry. Primarily, an inverse of the 
coefficient matrix A only exists when A is a square nxn matrix. This condition can only 
be met in the case of a four eNodeB network, where the system of equations reduces to 
three equations for three unknowns. Other network sizes produce an under-determined or 
over-determined system of equations and do not have a unique solution. Second, 
eNodeBs with fixed distances and tower heights spread at evenly spaced angles across 
the coordinate plane can cause some of the coefficients in matrix A to equate to zero. For 
fixed towers, the Z-coordinates always cancel out, and X-Y coefficients may cancel out 
as well, dependent upon their calculated values based on the law of cosines and TA radii. 
In essence, matrix A becomes a singular matrix, where the determinant of the matrix is 
zero and has no inverse, and Ax =b does not exist or is not unique. These problems are 
frequently encountered with GPS technology and can be mitigated through the use of 


pseudo-ranging. 


In linear algebra, a resolution to the first problem, where A is not a square matrix, 
is to not rely on A having an inverse and use Gaussian elimination with partial pivoting to 


find a least-squares, or “best fit” solution. This employs the theorem that if Ais an mxn 
matrix of rank n, the normal equations A’Ax=A'‘b have a unique solution 
x =(A‘A)'A‘b, and x is the unique least-squares solution to the system Ax=b. If A 


is a square matrix, this theorem will provide the same solution as x = A“b. 


While suitable for the problem of nonsquare coefficient matrices, the solution 
presented above does not satisfy the second problem presented, where X-Y-Z coefficients 


cancel to zero, and A becomes a singular matrix. Essentially, the rank, or number of 
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pivots, of A for an mxn matrix becomes k, where k<n. In these cases, the Moore- 


Penrose pseudo-inverse can be used to compute a least-squares solution to a system of 
equations. The mxn matrix A” is the pseudoinverse of a matrix A if A” satisfies four 
Moore-Penrose conditions: AA"A=A, A*AA* =A’, AA’ is asymmetric matrix, and 


AA is asymmetric matrix. 


Singular value decomposition (SVD) is used to calculate A” by replacing every 
nonzero entry in matrix A by its reciprocal and then taking the transpose of the resulting 


matrix. For a linear system of spheres Ax=b, the least-squares solution with the 


smallest norm |x| becomes |x| = A*b, giving a “best fit” point of intersection for all 


spheres in the system and a likely location approximation. 


To demonstrate the potential for geolocating a UE within a real world LTE 
network in three dimensions, software-implemented simulations were again produced 
using MATLAB. Multiple eNodeB scenarios were simulated using the mean distance 
per unit of TA of 78.125 meters derived from calculations in Chapter I]. The same 
scenarios were then executed a second time with the application of a randomly selected 
measurement standard deviation of 0.5 meters per unit of TA, 78.125 meter quantization 
error standard deviation and 39.0625 meter bias to the radii and compared against the 


first run. 
Cc, THREE BASE STATION SIMULATION 


The first three-dimensional simulation uses the algorithm for solving a system of 
equations for spheres presented with three eNodeB radii to approximate the location of a 
UE. Similar to the two-dimensional simulations in Chapter III, the UE’s true location is 
the origin on the X-Y-Z plane. The simulation creates three eNodeBs at varying degrees 
in relation to the UE, each with normally distributed random distance with a mean of 1.2 
kilometers from the UE, standard deviation within a range of 400 meters, and TA per the 
calculated value of 78.125 meters. Since the value of TA is discrete, the same process of 


rounding the radial distance to a whole unit of TA is used. Tower height of the eNodeBs 
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were generated with normally distributed random heights having a mean of 305 meters 
from the ground, with a standard deviation of 250 meters to facilitate a minimum eNodeB 


height of 55 meters. 


Ten trials were conducted with a Monte Carlo simulation of one hundred 
thousand iterations per trial. The average distance from the approximation point to the 
actual UE location for each separate trial was recorded. The simulation was then 
repeated with the addition of measurement standard deviation of 0.5 meters per unit of 
TA, 78.125 meter quantization error and 39.0625 meter bias to introduce fluctuations in 


the radii of the spheres and compared with the first simulation results. 


In both cases, the simulations provided extremely accurate results and were far 
better than all two-dimensional simulations. Another interesting find with the three 
eNodeB network simulation was that the introduction of standard deviation to TA and 
quantization error to the radii had little effect on the approximation error, and all results 
were consistently less than one meter of distance error between the approximation and 
the true UE location. The results of the simulation for all ten trials are shown in Figure 
24, and shows the average distance between the estimated position and the actual location 
of the UE was less than 10 centimeters. A Mean Radial Spherical Error (MRSE) analysis 
was also conducted, the results are shown in Figure 25. To calculate MRSE, the 
variances for the X, Y, and Z coordinates of all 100,000 Monte Carlo estimates are 


summed, and the square root of this value is taken: 


MRSE = |o. +o, +o. (13) 


The radial value of MRSE, centered on the origin and actual UE location, shows 
where 61% of the location estimates are contained. Based on these results, it 1s safe to 
assume a UE can be accurately located in a three eNodeB network within a 20 meter 
radius. Sample plots generated from the three-dimensional three eNodeB simulations, 


with estimate errors well within the 10 centimeter average, are presented in Appendix C. 
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Estimate Distance Error with Three eNedeBs 
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Figure 24. Three-dimensional average distance from estimate to UE with 3 eNodeBs. 


MRSE with Three eNodeBs 


zi 





= 


RATT fesininin 3 wine ecient arsine ween nee eee eeenenes ER deenes : 


zi 


RRR RR RRR ee = = Gh kh he eh a 





MRSE 61% Containment Radius{meters) 
s 


0 1 2? 3 8 5&5 6&6 F 8B 98 10 
Simulation (each vath 100000 iterations) 


Figure 25. Mean Radial Spherical Error from 3 eNodeBs simulation. 
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D. FOUR BASE STATION SIMULATIONS 


The next simulation investigates a four eNodeB LTE network. The same 
parameters were used as the previous simulation with eNodeB placement at random 
angles from the UE, mean distances of 1.2 kilometers with standard deviation of 400 
meters, radi based on the calculated TA value of 78.125 meters, and random tower 


heights of 305 meters from the ground with standard deviation of 250 meters. 


Ten trials with a Monte Carlo simulation scheme of 100,000 iterations per trial 
were executed, and the average distance between the approximations and the actual UE 
location were recorded. The ten trials were then repeated with eNodeB placement at 
evenly spaced angles while maintaining random heights and distances. Next, ten trials 
were run with eNodeB placement at evenly spaced angles and random tower heights but 
fixed distances of 1732 meters. Finally, a fourth set of ten trials were conducted for 
eNodeB placement at evenly spaced angles, fixed distances of 1732 meters, and fixed 
tower heights of 305 meters each, portraying the most ideal network setting. The 
algorithm for a system of equations discussed previously was used to calculate the 
approximation coordinates, to include employment of finding a least-squares solution to 


mitigate possible singular matrices when running the ideal network scenario test. 


With the addition of a fourth eNodeB-generated sphere, approximation accuracy 
on the average consistently improved in comparison to the two-dimensional simulations, 
but diminished in comparison to the previous three eNodeB simulation. In retrospect, a 
similar situation occurs with a three-dimensional four eNodeB network just as with a 
two-dimensional three eNodeB network, where very large approximation errors are 


weighed in with several accurate position estimates. 


An example of a four eNodeB network with a gross approximation error is 
displayed in Figure 26, where the distance between the approximation and the UE was 
134 meters. The root cause of the large fluctuation in accuracy can be centralized within 
the system of equations for a four eNodeB network. Having four spheres equating to four 
equations and then reducing them to three equations, we see that the algorithm is left with 


three equations to solve for three unknowns. The mathematics becomes ambiguous when 
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dealing with square terms, essentially resulting at times to a quadratic solution with two 
possible values. In all cases, the largest variation can be found in the approximated 
height value for Z, which can be a very large positive or negative number, or essentially 


very high above or very far below the surface of the Earth. 
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Figure 26. Example of gross three-dimensional approximation error with a 4 eNodeB 


network. 


Regardless of the possibility for large approximation errors, the simulations 
resulted in accuracy far better than the two-dimensional simulations. The results of the 
four scenarios involving eNodeB placement and height for all ten trials of the simulation 
are displayed in Figure 27. Despite changes in the network due to random eNodeB 
placement and characteristics, the average distance between the approximation and the 
actual UE location fell within 5 meters. The most ideal scenario of evenly spaced 
eNodeBs with fixed distances and tower heights had exactly zero error. However, the 


results of the MRSE analysis shown in Figure 28 shows an extremely high degree of 
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variance within the Monte Carlo simulation results, and suggests that, on the average, 
61% of the location estimates can be contained within a radius of 1000 meters from the 


actual UE. 
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Figure 27. Three-dimensional estimate error analysis with 4 eNodeBs. 
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Figure 28. Three-dimensional MRSE error analysis with 4 eNodeBs. 
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The same simulations were performed a second time to evaluate the effects of 
introducing standard deviation to the TA and radii of the four spheres. With standard 
deviation applied, the average distance between the approximation and the actual UE 
location increased slightly for the most part, including a small but noticeable increase of 
estimation error in the ideal network scenario. As indicated in Figure 29, the error 


generally fell somewhere less than 10 meters. 
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Figure 29. Three-dimensional estimate error analysis with 4 eNodeBs, standard 
deviation applied 


The MRSE results for the same simulation were calculated and are shown in 
Figure 30. Similar to the results in the previous simulation, a degree of high accuracy 
with low precision is seen with the four eNodeB network. By introducing standard 
deviation, the four eNodeB network shows 61% containment within an average radius of 
10,000 meters. Sample plots generated from the three-dimensional four eNodeB 
simulations are presented in Appendix C, including examples where the error was less 


than one meter. 
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Figure 30. Three-dimensional MRSE error analysis with 4 eNodeBs, standard 
deviation applied. 


As stated previously, the gross approximation error derived primarily from the 
calculated Z-coordinate. In all cases of gross approximation results, the X-Y coordinates 
remained sound, correlating very closely to the true X-Y coordinates of the actual UE. In 
a real-world situation, one could assume that a UE would not be located at large distances 
above or below the surface of the Earth. This does not suggest that a height coordinate 
for a UE location estimate should be ignored, but, for purposes of geolocating rapidly, 


two accurate X-Y coordinates more than suffice to approximate a UE location. 


To justify this argument, an example of a four eNodeB network with gross 
approximation error is presented in Figure 31. In this example, the algorithm calculated 
the Z-coordinate of the approximation as -1540 meters, or better said 1540 meters below 
the surface of the Earth. However, when using Pythagorean Theorem to calculate the 
distance from the approximation to the actual UE location using only X-Y coordinates in 
the equation, we can locate the UE position accurately, within 85 centimeters. 
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Figure 31. Example of an accurate location estimate with a 4 eNodeB network using 
approximation X-Y coordinates and disregarding the gross Z-coordinate value. 


EK. MULTIPLE BASE STATION SIMULATIONS 


The final three-dimensional simulation tests approximation accuracy used 
multiple eNodeBs and followed the same approach as the two-dimensional multiple 
eNodeB simulation. First, eNodeBs were placed at random angles in relation to the UE 
at the origin. Distances of the eNodeBs followed a normally random distribution with a 
mean of 1.2 kilometers and standard deviation of 400 meters. Tower heights of the 
eNodeBs were randomly generated with a mean of 305 meters and standard deviation of 
250 meters to facilitate a minimum tower height of 55 meters. TA-based radii of the 
spheres generated between the eNodeBs, and the UE used the calculated value of 78.125 
meters per unit of TA. The simulation included the three and four eNodeB networks 
previously simulated and continued to test increments in the number of eNodeBs, up to a 
network with ten eNodeBs. A Monte Carlo simulation of 100,000 iterations was 
conducted for each network size, and the average distances from the approximation to the 


actual UE location was recorded. 
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Next, the simulation was repeated with eNodeB placement at evenly spaced 
angles in relation to the actual UE location at the origin and maintained random distances 
and tower heights. A third simulation was executed leaving evenly spaced eNodeB 
placement and random tower heights, but changed the distances of the eNodeBs to a 
fixed value of 1732 meters. Finally, a fourth simulation tested the most ideal network 
scenario, using evenly spaced angles for eNodeB placement, fixed distances of 1732 
meters, and fixed tower heights of 305 meters. The algorithm for a system of equations 
of spheres and the use of matrices to solve for the approximation coordinates was 
employed, including the use of a least-squares solution for cases involving singular 
coefficient matrices with the most ideal network scenario. For all scenarios, the 


simulations included factorization of the Z-coordinate with the four eNodeB network. 


The results of the simulation, displayed in Figure 32, showed best accuracy 
obtained with a network encompassing only three eNodeBs. The largest approximation 
error occurred in the four eNodeB network, which was expected to have a higher degree 
of error than the network using only three eNodeBs. Interestingly, the margin of 
approximation error with five or more eNodeBs remained consistent, despite the 
increment of additional towers, and well below the error seen in the four eNodeB trial. 
Another point of interest is the smaller degree of approximation error in the three eNodeB 
network when compared to five or more eNodeBs. This suggests that, with a system of 
equations to solve for three unknowns, a system of four or more equations would not be 
as precise as a system of only two equations. In the case of the ideal network scenario, 
the results for all network sizes approximated the exact location of the UE with zero 
error. The average estimated location results are displayed in Figure 32 and an LTE UE 
location can be approximated well within 1 meter, based upon a lack of standard 


deviation. 


The MRSE for the approximation error is shown in Figure 33, but the results are 
ambiguous due to the 61% radial containment for the four eNodeB network ranging up to 
2200 meters. The MRSE results are enhanced in Figure 34, and the higher accuracy and 


precision with a three eNodeB network is validated. The five eNodeB network indicates 
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61% estimate containment within 12 meters. Interestingly, the precision increases by 
incrementing the number of eNodeBs past five and gives an average of 61% containment 


within 3 meters. 
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Figure 32. Three-dimensional estimate error analysis with multiple eNodeBs. 
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Figure 33. Three-dimensional MRSE error analysis with multiple eNodeBs. 
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Figure 34. Three-dimensional MRSE error analysis with multiple eNodeBs 
(enhanced view). 


Next, the same simulations were executed to include the randomly selected 
measurement standard deviation of 0.5 meters per unit of TA, 78.125 meter quantization 
error and 39.0625 meter bias to induce fluctuation in the radii of the eNodeB spheres. 
The results of this simulation are shown in Figure 35, showing high accuracy with 
average estimate results falling within 50 centimeters. The three eNodeB network again 
displayed the highest accuracy, a four eNodeB network susceptible to ranging error due 
to ambiguous results and less than 1 meter accuracy for networks of five or more 


eNodeBs. 
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Figure 35. Three-dimensional estimate error analysis with multiple eNodeBs, 
standard deviation applied. 


The MRSE analysis for the same simulation, shown in Figure 36, indicated 
extremely high variance in the four eNodeB network. A closer look at the MRSE results 
is displayed in Figure 37. With standard deviation applied, a three eNodeB network had 
61% containment of location estimates falling within a radius of less than 1 meter. The 
five eNodeB network had 61% containment of location estimates within 35 meters, and 
network sizes from six to ten eNodeBs had 61% containment well within 10 meters. 
Also, while not accurately portrayed in these figures, the addition of standard deviation 
did cause approximation error in the ideal network scenario for all network sizes but was 


infinitely very small and negligible. 
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Figure 36. Three-dimensional MRSE error analysis with multiple eNodeBs, standard 
deviation applied. 
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Figure 37. Three-dimensional MRSE error analysis with multiple eNodeBs, standard 


deviation applied (enhanced view). 
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A final simulation was conducted with the same parameters as the previous run, 
maintaining the measurement standard deviation of 0.5 meters per unit of TA, 78.125 
meter quantization error and 39.0625 meter bias. For the four eNodeB network, the Z- 
coordinate for estimated UE height was omitted from the approximation calculation, 
relying solely on the derived X-Y coordinates. The results of the average distance 
between the approximation and actual UE location are shown in Figure 38. As before, 
the approximation error for the most ideal network scenario remained negligible, and the 


three eNodeB network maintained the most accurate UE position estimates. 
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Figure 38. Three-dimensional estimate error analysis with multiple eNodeBs, 
standard deviation applied and disregarding approximation Z-coordinate in the four 
eNodeB network. 


By omitting the Z-coordinate from the approximation calculation, the four 
eNodeB network displayed approximation accuracy well within 0.5 meters for the totally 
random eNodeB placement and height scenario. The results also show a trend with 
structured networks, where incrementing the number of eNodeBs used in the network 


causes an increase in error up to 30 centimeters when geolocating a UE. 
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The MRSE analysis results shown in Figure 39 give indication of high variance in 
the four eNodeB network for the worst case scenario, despite the omission of the Z- 
coordinates. However, the four eNodeB network had a significant increase in precision 


with the other scenarios involving a more ideal eNodeB placement scheme. 
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Figure 39. Three-dimensional MRSE error analysis with multiple eNodeBs, standard 
deviation applied and disregarding approximation Z-coordinate in the four eNodeB 
network. 


To better analyze the MRSE for all network sizes, an enhanced view of the results 
with standard deviation and omission of the Z-coordinate in the four eNodeB network is 
shown in Figure 40. Again, the three eNodeB had 61% containment of estimate results 
falling within a radius of less than 1 meter, the four eNodeB network within a radius of 
100 meters, a five eNodeB network within 35 meters, and all other network sizes well 


within 10 meters. 


Based on the overall results of the three-dimensional multiple eNodeB 
simulations conducted, it is safe to assume that a UE within a LTE network with three 
eNodeBs can be accurately geolocated within 50 centimeters of its true location based 


upon known TA data and eNodeB heights and locations. Networks with four eNodeBs 
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provide geolocation accuracy of a LTE UE within 100 meters. LTE UEs can be 
accurately geolocated in networks of five eNodeBs within 35 meters. Networks with six 
or more eNodeBs provide LTE UE geolocation accuracy well within 10 meters. Sample 
plots generated from the three-dimensional multiple eNodeB simulations are presented in 


Appendix C, including examples of the ideal network results with negligible 


approximation error, on the level of 10° meters. 
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Figure 40. Three-dimensional MRSE error analysis with multiple eNodeBs, standard 
deviation applied and disregarding approximation Z-coordinate in the four eNodeB 
network (enhanced view). 


Geolocating an LTE UE in a three-dimensional aspect based on the propagation 
of LTE signals containing TA information transmitting from a variable height of an 
eNodeB to a UE was explored in this chapter. With calculated values of TA established 
in Chapter IJ, position approximation algorithms developed in Chapter III were refined to 
create a three-dimensional computer simulation model that accurately located a UE using 
spherical systems of equations. Monte Carlo simulation schemes found that using 
average distance from an approximated position to actual UE location or MRSE as a 


measure, an LTE UE can consistently be located within the distance per unit of TA, less 
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than 50 centimeters from the actual position in a three eNodeB network and less than 35 
meters from the actual position in networks of five or more eNodeBs. The three- 
dimensional simulation results showed excellent geolocation capability and proved to be 
a far more accurate solution in comparison to a two-dimensional form of geolocation 


explored in Chapter III. 
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V. CONCLUSIONS AND RECOMMENDATIONS 


A. CONCLUSIONS 


Extraction of TA data from an initial RAR message is a viable means of 
correlating range radius between an LTE eNodeB and UE. With the use of multiple 
range radii from several eNodeB, crossing radii can very effectively establish a UE 


location. 


Computer simulations modeling an LTE network showed promising geolocation 
results based upon resolved per unit TA derived from an 11-bit MAC field and little to no 
variance. The use of trilateration of triangles on a two-dimensional plane showed 
geolocation accuracy should consistently be practical within a 60-meter CEP. Results 
improve exponentially with trilateration of spheres on a three-dimensional plane, which 
indicate a consistent geolocation accuracy practical within 50 centimeters MRSE for a 
three eNodeB network and within 35 meters MRSE for network sizes of five or more 
eNodeBs. While it is possible to have very approximate location estimates in a four 
eNodeB network, variance due to ambiguity in the results suggest a higher degree of 


inaccuracy when compared to other network sizes for geolocation purposes. 


The prerequisites of such accurate location approximations reside with specific 
knowledge of TA values and offsets and eNodeB tower characteristics of location and 
height above the ground. This information is imperative and important to consider when 
employing a system capable of geolocation. Any error in tower characteristics has 
potential to offset geolocation results since intersections of radii based on that tower, 
whether circular or spherical, will increase the distance between the UE estimate and true 


location. 


With the principles explored through research and simulation, it is possible to 
geolocate an LTE UE within approximately 60 meters when using a two-dimensional 
mapping coordinate mapping scheme, offering potentially ten times better accuracy than 


GSM methods previously explored in literature. Furthermore, it is possible to geolocate 


a7 


an LTE UE within approximately 50 centimeters by using a three-dimensional mapping 
approach, taking into account that TA is a calculated distance from one height to another, 
and is comparable to geolocation accuracy in GPS technologies. Both geolocation 
methods provide an excellent resource to be refined and expanded upon for employment 
by emergency response teams and tactical personnel. The current deployment of LTE as 
a 4G network for the two largest mobile carriers demands effective means of geolocation, 


such as those presented in this research. 


B. RECOMMENDATIONS 


Future research should concentrate primarily on successful extraction of LTE 
signals from the air and analysis of TA data and real-world LTE signal internals 
behavior. Field testing and collection of real-world data can be used to validate and 
refine the findings in this research. Development of a software graphical user interface 
that employs the geolocation methods established for LTE would be a valuable 
commodity for emergency response teams and tactical users operating in areas with 
currently deployed or soon-to-be deployed networks. Augmentation of the three- 
dimensional multiple eNodeB simulation could provide less approximation error by 
comparing and contrasting location estimate results from individual groups of three 
eNodeBs within the larger network. A thorough investigation into the LTE specifications 
for other aspects and mechanisms of ranging should be conducted, along with a focus on 


the TDD functionality and eNodeB switching capability between duplexing schemes. 
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APPENDIX A. LTE PARAMETERS FOR DOWNLINK 
TRANSMISSION SCHEME 


Table 1. | Parameters for Downlink Transmission Scheme (After [12]). 


Transmission BW 5 MHz 10 MHz 5h 20 MHz 

S$ub-frame duration 1 msec 

Sub-carrier spacing 15 KHz 

Sampling frequency 1.92 MHz | 384MHz | 7.68 MHz 15.56MHz | 23.04MHz | 30.72 MHz 
(1/2 x (2x3.84 (43.34 (6x 3.84 (8x 3.84 
3.84 MHz) M we Mines M are M aber] 





Number of resource 

blocks 

Number of occupred 

sub-carners 

Number of OFDM 

symbols per 

subframe 

(Normal; Extended 

CP length | Normal (4.69/9) x (4.69/36) x | (4.69/72) x | (4.69/108) | (4.69/144) 

(iu 6, ct 6, (5.21/40) | 6, (5.21/80) | x6, x 6, 

{samples} (5.21/10) | (5.21/20 x1 x1 (5.21/120) | (5.21/760) 
xi 1 x1 x1 

Extended | (16.67/32) | (16.67/64) | (16.67/128) | (16.67/256) | (16.67/384) | (16.67/512) 
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APPENDIX B. TWO-DIMENSIONAL SIMULATIONS 


A. TWO BASE STATIONS THROUGH VARYING ANGLES 


1. Two Base Stations Through Varying Angles MATLAB Code 


oe 


LTE-Two Base Station Simulation with Varying Angle 
LT L. A. Jarvis, NPS GSEAS 
ey. J, 420 Nov 2010 


oe 


o\? 
ye) 


clear all; 


6 LTE Calculated Timing Advance Distance Parameter 
TA = 78.125; sMeters per unit of Timing Advance 


6 Uncomment for applying Timing Advance standard deviation 
6StdTA = 0.5; 


oe 


Uncomment for applying Quantization error based on TA 
6qkrror = 78.125; 


6 Uncomment for Bias based on quantization error 
Sbias = gError/2; 

& Simulated eNodeB Distance Parameters 

SsiteDist = 1000; SMean Site Distance 

siteStDev = 300; SSite Standard Deviation 


fe) 


%* Simulation Parameters 
iterate = 100000; 


= Cairvocle Pilots 


numPoints = 30; sNumber of points in circle plots 
rad = (O:numPoints) *2*pi/numPoints; 
phi = 18; 


fe) 


6 Initialize arrays for average angle and distance error 


angleAverage = O:phi; sAngle Average 
distanceError = O:iterate; %Distance Error 


degrees = O:phi; 

% Iterate angles in 10 degree increments 

for 1 = O:phi 
theta = i*pi/phi; SAngle from Subscriber to eNodeB 2 
degrees(itl) = theta*180/pi; 


fe) 


% Repeated iterations for averaging 
for j = l:iterate 


fe) 


& Distance to simulated eNodeBs with (X,Y) coordinates 
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{eo} 


%& eNodeB on axis 

Dist_eNodeB_1 = siteStDev*randn(l) + siteDist; 

x _1 = Dist_eNodeB_1; 

ya. = 0; 

% Second eNodeB 

Dist_eNodeB_2 = siteStDev*randn(1) + siteDist; 

x 2 = cos(theta) *Dist_eNodeB 2; 

y_2 = sin(theta) *Dist_eNodeB_2; 

6 Timing Advance for eNodeBs 

TA _eNodeB_1 = round(Dist_eNodeB_1/TA); 

TA _eNodeB_ 2 = round(Dist_eNodeB_2/TA); 

% Uncomment for applying Timing Advance standard deviation 
STA eNodeB_1 = round (Dist_eNodeB_1/TA)+round (stdTA*randn(1)); 
STA eNodeB 2 = round(Dist_eNodeB_ 2/TA)+round(stdTA*randn(1)); 


%& Site Radii based on TA 

radii _eNodeB_1 = TA _eNodeB_1 * TA; 

radii _eNodeB_ 2 = TA _eNodeB 2 * TA; 

6 Uncomment for applying quantization error 
6radii_eNodeB_1l = TA_eNodeB_1 * TA + gError*rand(1)-bias; 
S6radii_eNodeB_2 = TA_eNodeB_2 * TA + gError*rand(1)-—-bias; 


6 Intersite distance via Pythagorean Theorem and angle from 
ATAN2. Intersite distance will be random through each 
iteration 

intersiteDist = sqrt ((x_2-x_1)*%2 + (y_2-y_1)%2); 

angle = atan2((y_2-y_1), (x_2-x_1)); 


fo) 
xe) 
fo) 

xe) 


Find Midpoint Between Circles or Circle Intersections 
Separated Radiil 
i1f(intersiteDist > radii_eNodeB_1 + radii_eNodeB_ 2) 
delta_R = intersiteDist - radii_eNodeB_1 —- radii_eNodeB 2; 
midpoint_X = x_l+t+cos (angle) * (radii_eNodeB_1+0.5*delta_R 
midpoint_Y = y_1+sin(angle) * (radii_eNodeB_1+0.5*delta_R 
%& Contained Circles 
elseif (intersiteDist < abs(radii_eNodeB_ 1 —- radii_eNodeB_ 2) ) 
if (radii _eNodeB_1 > radii _eNodeB 2) 
delta_R = radii_eNodeB_ 1 - radii_eNodeB 2 -... 
intersiteDist; 
midpoint_X = x_l+t+cos (angle) * (radii_eNodeB_1-... 
J4.0 delta R) 
midpoint_Y = y_1l+sin(angle) * (radii_eNodeB_1l-... 
OU. S° dele Rk). 


oP ol? 


3 
)3 


else 
delta_R = radii _eNodeB 2 - radii _eNodeB_ 1 -... 
intersiteDist; 
midpoint_X = x_l+t+cos (angle) * (~radii_eNodeB_1-... 
Us o7Cdelte RR): 
midpoint_Y = y_l+sin(angle) * (-radii_eNodeB_1-... 
0. 5*delta_R); 
end 
& Intersections 
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else 
% Distance eNodeB_1 to Midpoint 
midpoint_eNodeB_1 =(radii_eNodeB_1*radii_eNodeB_1-... 
fadii eNodeB _2*radii. GNodeB_ 2ZFintersitvebist* eu « 
intersiteDist) /(2*intersiteDist); 
midpoint_X=x_l+midpoint_eNodeB_1* (x_2-x_1)/intersiteDist; 
midpoint_Y=y_l+midpoint_eNodeB_1* (y_2-y_1)/intersiteDist; 


end 
> Distance from Midpoint to Subscriber at Origin 
distanceBrror(]) = sqrt (midpoint_X*Z2+midpoint_Y%*2Z) ; 


end 
angleAverage (1+1)=mean(distanceError) ; 


% Plot Once Every Other Angle 
1£ mod(i,2)==0 
Figure (1/271); 
cli: 
hold on; 
axis equal; 
title(["'eNodeB 1 on X Axis, eNodeB 2 at ',... 
int2str(i*10), ' Degrees'], 'FontSize',12); 
Xxlabel ('Meters', 'FontSize',12); 
ylabel('Meters', 'FontSize',12); 
plot (radii_eNodeB_1*cos(rad)+ x_l, radii_eNodeB_1l... 
“sin(racd)+ v1, t="); 
plot (radii_eNodeB_2*cos (rad)+ x_2, radii_eNodeB_2... 
sai (rad) yi 2, "=a" ) > 
ploutx_l,yy_l, **b", *Markersige*, 12); 
plot (x 2,y7_2, "mM , *Marktersize’,12); 
plot (midpoint_xX,midpoint_Y,'rp', 'MarkerSize',12); 
plou( 0,0, sk", *Markercize*,12); 
hold @£1; 
end 
end 


% Plot Overall Results Angle Between eNodeB vs. Distance to Midpoint 

FIGURE ( 1/272 )-% 

Cie 

axesl = axes('Parent',figure(i/2+2),'YGrid','on','XDir', 'reverse'); 

hold(axesl,'all'); 

title('2 eNodeB BS Estimate Error Varying Angle','FontSize',12); 

xlabel('Angle Between eNodeBs (Degrees)', 'FontSize',12); 

ylabel(['Average Distance from Center Point Estimate to ',... 
"Subscriber (meters) '],'FontSize',12); 

plot (degrees, angleAverage, 'MarkerFaceColor',[1l 0 O],... 
'MarkerSize',10, 'Marker','o', 'LinewWidth',2,'Color',[0 0 1]); 
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Ze Two Base Stations Through Varying Angles Example Plots 
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Figure 41. 


Sample plots from 2 eNodeB simulation with varying angles and 
distances. 


(Triangles denote the eNodeBs, a square indicates the actual UE location, and the star 
shows approximation center point.) 
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B. MULTIPLE BASE STATIONS 


1. Multiple Base Stations MATLAB Code 


Multiple Base Station Simulation 

Combined 

Random Angle, Random Distance (Figures 1-9) 
Even Angle, Random Distance (Figures 10-18) 
Even Angle, Fixed Distance (Figures 19-27) 
Error Estimation Analysis (Figure 28) 

CEP Estimation Analysis (Figure 29) 

LT L. A. Jarvis, NPS GSEAS 

Rev; l2,y 2° Nov. 2Uulv 


OP AP AP AP A DP WP OO 1? 


clear all; 


6 LTE Calculated Timing Advance Distance Parameter 
TA = 78.125; Meters per unit of Timing Advance 


6 Uncomment for applying Timing Advance standard deviation 
SSstdTA = 0.5; 

Quantization error based on TA 

Bi 


GError = 76.125; 


Bias based on quantization error 
bias = gError/ 2; 


fe) 


% Simulated eNodeB Distance Parameters 


siteDist = 1200; SMean Site Distance 
siteStDev = 400; SSite Standard Deviation 


fe) 


= Siamulacion Parameters 


max_eNodeB = 10; SMaximum number of eNodeB to simulate 
iterate = 100000; SNumber of iterations at each eNodeB 


> Carole Plots 


numPoints = 180; sNumber of points in circle plots 
rad = (O:numPoints) *2*pi/numPoints; 


fe) 


+ Initialize arrays for data analysis 


averageErrorl = O:max_eNodeB-2; sAverage Error at N eNodeB 
averageError2 = O0:max_eNodeB-2; 

averageError3 = O0:max_eNodeB-2; 

stDevErrorl = O:max_eNodeB-2; 6Standard Deviation at N eNodeB 
stDevError2 = O:max_eNodeB-2; 

stDevError3 = O:max_eNodeB-2; 

CEP1 = O:max_eNodeB-2; 6Circular Error Probable at N eNodeB 
CEP2 = O:max_eNodeB-2; 


CEP3 = O:max_eNodeB-2; 
numBS = O0:max_eNodeB-2; SsArray of number of eNodeB 
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fe) 


6 Initialize counter for figures 
count = 1; 


Tor D = 1:3 


fe) 


6 Setup simulation 
for N = 2:max_eNodeB 


fe) 


% Initialize sized arrays 


distance = zeros(1,N); sArray of distances to eNodeBs 
siteX = zeros(1,N); sArray of eNodeB X coordinates 
SiteY = zeros(1,N); sArray of eNodeB Y coordinates 
SiteTA = zeros(1,N); SsArray of Timing Advance 

SiteRad = zeros(1,N); SsArray of eNodeB radii 

interlX = zeros(1,N); sArray of intercept 1 X coordinates 
interlY = zeros(1,N); SsArray of intercept 1 Y coordinates 
inter2xX = zeros(1,N); sArray of intercept 2 X coordinates 
inter2Y = zeros(1,N); sArray of intercept 2 Y coordinates 
© Array of select intercept from pair's X coord 

interX = zeros(1,N); 

© Array of select intercept from pair's Y coord 

imterY —= zeros (1,N); 

6 Array of distances for center point estimation 

decp = zeros(l1,iterate); 


fe) 


6 Begin iterations 
for h = l:iterate 


fe) 


&* Create eNodeBs 
Tor 1. = LEN SNumber of eNodeb 


fe) 


& Distances to simulated eNodeBs with (X,Y) coordinates 


if (D==1) 
distance(i) = siteStDev*randn(1) + siteDist; 
Lietea = 2*pi*rand (1); “Random angle from UE 
elseif (D==2) 
distance(i) = siteStDev*randn(l) + siteDist; 


theta = 2*pi*i/N; SRandom angle from UE 
elseif (D==3) 


distance(i) = 1000; SFixed distances of 1000m 

theta = 2*pi*i/N; %Evenly spaced angles from UE 
end 
siteX(1) = cos(theta) *distance(i); %X coordinate 
siteY(1) = sin(theta) *distance(i); %Y coordinate 
6Timing Advance 
SsiteTA(i) = round(distance(i)/TA); 
6 Uncomment for applying Timing Advance standard deviation 
Sel CeraA(i) = round (distance (1) /TA)+round (stdiA* randn (1).):> 
S6Radius from Timing Advance 
SiteRad(i) = siteTA(i) * TA; 
6 Uncomment for aplling quantization error 
6SsiteRad(i) = siteTA(i) * TA + gError*rand(1)-bias; 


end 


* Find Two Intersections for Bach Pair of Radii 
for a = L:N 


b = mod(a,N)+1; 


% Intersite distance via Pythagorean Theorem, 
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%& angle from ATAN2 
isDist = sqrt((siteX(b)-siteX(a))*%2 + (siteY(b)-... 
SiteY(a))%*2); 
angle = atan2((siteyY(b)-siteY(a)), (siteX(b)-siteX(a))); 
% Find Midpoint Between Circles or Circle Intersections 
Separated Radiil 
(1sDist > siteRad(a)+siteRad (b) ) 
%& Closest Point Set as Both Intersections 
deltaR=isDist—siteRad(a)-siteRad(b); 
inter1X (a) =siteX(a)+cos (angle) * (siteRad(a)+0.5*deltaR) ; 
inter1lY(a)=siteY(a)+sin(angle) * (siteRad(a)+0.5*deltaR) ; 
inter2X (a) =inter1X (a); 
inter2Y (a) =interlyY (a); 
%& Contained Circles 
elseif (isDist < abs(siteRad(a)—-siteRad (b) ) ) 
%& Narrowest Set as Both Intersections 
if (siteRad(a) > siteRad(b) ) 
deltaR=siteRad(a)-siteRad(b)-1isDist; 
inter1X (a) =siteX(a)+cos (angle) * (SiteRad(a)-... 
0.0" del teak) ? 
interlyY(a)=siteY(a)+sin(angle) * (SiteRad(a)-... 
0.07 deltaR)? 
inter2X (a) =interlX (a); 
inter2Y (a) =interlyY (a); 
else 
deltaR=siteRad(b)-siteRad(a)-1isDist; 
inter1X (a) =siteX(a)+cos (angle) * (-siteRad(a)-... 
Uw Celta): 
interlY(a)=siteY(a)+sin(angle) * (-~siteRad(a)-... 
0.5" deltarR)- 
inter2X (a) =inter1X (a) ; 
inter2Y (a) =interlyY (a); 


o\? 


yh 


end 
& Intersections 
else 
% Distance from eNodeB 1 to midpoint 
sitelmp=(siteRad(a)*2-siteRad(b)*2+isDist%*2)/... 
(2*1SDist)? 
6 Distance from midpoint to intercept 
mp2inter=sqrt (siteRad(a)*2-sitelmp%’2) ; 
% Midpoint X coordinate 
mpoX=siteX(a)+sitelmp* (siteX(b)-siteX(a))/isDist; 
% Midpoint Y Coordinate 
mpY=siteY(a)+sitelmp* (siteY(b)-siteY(a))/isDist; 
& First Intersection Coordinates 
inter1X (a) =mpX+mp2inter* (siteY(b)-siteY(a))/isDist; 
inter1lyY (a) =mpY-mp2inter* (siteX(b)-siteX(a))/isDist; 
%& Second Intersection Coordinates 
inter2X (a) =mpX-mp2inter* (siteY(b)-siteY(a))/isDist; 
inter2Y (a) =mpY+mp2inter* (siteX(b)-siteX(a))/isDist; 
end 


end 


ie) 


6 Select Closest Proximity Intersection from Each Pair 


67 


end 


ci 


Lor 7 La 

k = mod (7+l,N)eL; 

dl=sqrt ((interlX(k)-1inter1lX(jJ))*2+(interlYy(k)-... 
interlY(7))*2); 

diz=sqrc ((anterZ2xX(k) -ancerix()))*24 (anterzy (k) ae. 
interlY(j))%2); 

ix (O12: = -di) 
at = diz; 

end 

d2=sqrt ((interlX(k)-inter2X(jJ))*2+(interly(k)-... 
inter2Y(j))%2); 

dz2=scr ( (inter 7 x(k) =1terZ x (7) ) 2a ner ZY (Kk) —«@-~< 
inter2Y(j))%2); 

it (d22 = d2Z) 
d2 = d22; 

end 

% Store Selected Intersection in Array 

if (dl < d2) 
interX (Jj) 

else 
interX(jJ) = inter2X(j); interY(j) = inter2Y(j); 

end 

end 


inter1lX(j); interyY(j) interlY(j); 


% Approximate Center of Polygon from Selected Intersections 
by Coordinate Mean 

approxX = mean(interxX); 

approxY = mean(interyY); 


re\\e) 


fe) 


& Distance from Subscriber to Estimate 
decp(h) = sqrt (approxxX*2+approxYy%2) ; 


(D==1) 


fe) 


& Mean Estimate Error at N Stations 
averageErrorl(N-1) = mean(decp),; 


fe) 


& Standard Deviation of Error 
stDevErrorl(N-1) = std(decp) ; 


= Circular Error Pros et N Stations 
CEP1(N-1) = median(decp) ; 


elseif (D==2) 


fe) 


&% Mean Estimate Error at N Stations 
averageError2 (N-1) = mean(decp) ; 


fe) 


* gotendard Deviation ofr Error 
stDevError2 (N-1) = std(decp) ; 


= CLrcuilar Error Prod 2c N Stations 
CEP2 (N-1) = median(decp) ; 


elseif (D==3) 


end 


fe) 


%& Mean Estimate Error at N Stations 
averageError3(N-1) = mean(decp) ; 

%& Standard Deviation of Error 
stDevError3(N-1) = std(decp) ; 


> Circular Brror Pros 2c: 2] Sraericone 
CEP3(N-1) = median (decp) ; 
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numBS (N-1) = N; 


% Plot 
figure (count) 
cli; 
hold on; 
axis equal; 
title([int2str(N), ' eNodeB, ' int2str(decp(h)), 
' Meters from Approximation to UE'],'FontSize',12); 
Xxlabel ('Meters', 'FontSize',12); 
ylabel('Meters', 'FontSize',12); 
for p = 1:N 
% Plot eNodeB 
plot (siteX(p),siteY(p), '*b', 'MarkerSize',10); 
%& Plot TA Radius 
plot (siteRad(p) *cos(rad)+ siteX(p), siteRad(p)*sin(rad)+... 
siteY(p)); 
* Plot Both Intercepts 
plot (interlX(p),interlY(p),'ob', 'MarkerSize', 6); 
plot (inter2X(p),inter2Y(p),'ob', 'MarkerSize', 6); 
% Mark Selected Intercepts 
plot (interX(p),interY(p),'rd', 'MarkerSize',12); 
end 
% Plot UE 
plot (0,0,'sk", *MarkerSize",12); 
6 Plot Approximation 
plot (approxx, approxy, *rp*, *Markersize'", 12); 
hold Orr; 


Count = countct ls: 
end 
end 


6 Plot Overall Results Number of eNodeB vs. Distance to Midpoint 
figure (count); 
clr 
holed. oi; 
title('Estimate Error with Multiple eNodeB', 'FontSize',12); 
Xxlabel('Number of eNodeB', 'FontSize',12); 
ylabel({'Average Distance from'; 
"Center Point Estimate to UE (meters) '}, 'FontSize',12); 
plot (numBS (2:N-1),averageErrorl (2:N-1), '-bs', 'LineWidth',2); 
plot.(numBS (2:N—-1),averagemnrrorzZ (Z:N-1), *—rd’?, "Linewidrch’;, 2); 
plow (numBs (2:N=L),averagebrrors (Z27N=1L), '-—go'",*Linewidln’, 2); 
legend('Random Angle & Distances','Even Angles, Random Distances',... 
"Even angles, all 1 km', 'FontSize',12); 
hnolksd saz ; 


% Plot CEP Overall Results Number of eNodeB vs. Distance to Midpoint 
Figure (count+tl1) ; 

CLE; 

hold on; 

title('CEP Estimate Error with Multiple eNodeB', 'FontSize',12); 
Xxlabel('Number of eNodeB', 'FontSize',12); 

ylabel('CEP Radius (Meters)', 'FontSize',12); 
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plor (numBS (22 N=—1):,CEPLAZIN=L),*=be"*, *Lanewicch’ ,2); 
pLOoU (mMumMBsS (27 N—1l),CEP2(22N=—L);, "—Ee’ ;*banevigcn’, 2); 
plou(numBs (2:N=1),CHP3(2:N-L),*=90"* , *Lanewidchn*, 2); 


legend('Random Angle & Distances', 'Even Angles, Random Distances',... 


"Even angles, all 1 km', 'FontSize',12); 
nol. oir + 
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Ze Random Angle and Distance Example Plots 
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Figure 42. Sample multiple eNodeB plots with random angles and distances. 


(Triangles denote the eNodeBs, a square indicates the actual UE location, and the star 


shows approximation center point.) 
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3. Evenly Spaced Angles with Random Distance Example Plots 
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Figure 43. Sample multiple eNodeB plots with even angles and random distances. 


(Triangles denote the eNodeBs, a square indicates the actual UE location, and the star 


shows approximation center point.) 
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4. Evenly Spaced Angles with Fixed Distance Example Plots 
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Figure 44. Sample multiple eNodeB plots with even angles and fixed 1 km distance. 


(Triangles denote the eNodeBs, a square indicates the actual UE location, and the star 


shows approximation center point.) 
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5. Evenly Spaced Angles with Fixed Distance Example Plots, Standard 
Deviation Applied 
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Figure 45. Sample multiple eNodeB plots with even angles and fixed 1 km distance, 
standard deviation applied. 
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APPENDIX C. THREE-DIMENSIONAL SIMULATIONS 


A. THREE BASE STATIONS 


o\° 


AP oP oP 


o\° 


1. Three Base Stations Through Varying Angle MATLAB Code 


3D Base Station Simulation 
Three eNodeBs 

Random Angles, Random Distances 
LT L. A. Jarvis 

Rev. 9, 29 November 2010 


clear all; 


fe) 
ae) 


{e) 


xe) 


LTE Calculated Timing Advance Distance Parameter 


A = 78.125; sMeters per unit of Timing Advance 


Uncomment to apply Timing Advance standard deviation 
StdTA = 0.5; 

Uncomment to apply quantization error standard deviation 
Curpor = 7.125; 

Uncomment to apply bias from quantization error 
bias = QGError/ 2; 


Simulated eNodeB Distance Parameters 


siteDist = 1200; SMean Site Distance 

siteStDev = 400; SSite Standard Deviation 
SiteHigh = 305; “Mean Site Height 

SiteHSD = 250; 6Site Height Standard Deviation 
& Simulation Parameters 

numSimulation = 10; 

max _eNodeB = 3; 


iterate = 100000; 


fe) 


= 


[e} 


sphere Plots 


numPoints = 10; 
Pia = OFp1/numPoints:2*pi; 
th =(O0:pi/numPoints:pi)'; 


fe) 
oO 
fo) 

0 


Initialize arrays for data analysis 
Average error per simulation 


averagePositionError = zeros(1,numSimulation); 


fe) 


= 


[e} 


Standard dev per simulation 


stDevPositionError = zeros(1,numSimulation); 


fe) 


me) 


Mean Radial Spherical Containment 


MRSE = zeros(1,numSimulation); 
6Simulation Counter 
numSim = zeros(l,numSimulation) ; 
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for N=LsnumSimulation 


{eo} 


% Initialize sized arrays 


distance = zeros(l,max_eNodeB); *sArray of distances to eNodeBs 
sitexX = zeros(1,max_eNodeB) ; SArray of eNodeB X coordinates 
siteY = zeros(1,max_eNodeB) ; sArray of eNodeB Y coordinates 
siteZ = zeros(1,max_eNodeB) ; sArray of eNodeB Z coordinates 
SiteTA zeros (1,max_eNodeB) ; SArray of Timing Advance 
SiteRad = zeros(l,max_eNodeB) ; SsArray of eNodeB radii 

interX = zeros(1,iterate); 

interY = zeros(l1,iterate); 

interZ = zeros(l1,iterate); 

% Array of distances for center point estimation on (x,y,z) plane 
decp = zeros(l1,iterate); 


tor h=—L: 


fe) 


for 


end 


fe) 


all 
a2l1 


fe) 


al2 
a22 


fe) 


al3 
a23 


iterate 


%* Create eNodeBs 


1=1:max_eNodeB 


ie) 


%& Distances to simulated eNodeBs with (X,Y,Z) coordinates 


distance(i) = siteStDev*randn(l) + siteDist; 

theta. = 2*pi*rand (1); S“Random angle from UE 
SsitexX(1i) = cos(theta) *distance (1); SX coordinate 
sitey (1) Sin(theta) *distance (i); SY coordinate 
siteZ(1i) = abs(siteHSD*randn(1) + siteHigh); SZ coordinate 
SsiteTA(i) = round(distance(i)/TA); 6Timing Advance 
6 Uncomment to apply Timing Advance standard deviation 

S81 LeETA(1) = round (distance (1) /TA)+round (stdTA* randn (1) ):+ 
SiteRad(i) = siteTA(i) * TA; SRadius from TA 
6 Uncomment to apply quantization error 
6SsiteRad(i)=siteTA(i) * TA + gError * rand(l1) - bias; 


* Find x—Variable coerriciencs 


(Si1texX (24) -—sitex (1) )*2; 
= (sitexX(3)-sitexX(1))%2; 


6 Find y-variable coefficients 


(siteYy (2)-siteY(1))%2; 


= (siteY(3)-siteY(1))%2; 


S Find zg=variable coefficients 


(S1teZ (24) —siteZ (1) )*2; 


= (siteZ(3)—-sitez(1))%*2; 


& Find values for B-matrix 


SiteRad(1)%*2-siteRad(2)*2-sitexX(1)%*%2+sitexX(2)%*%2-... 
Sivey (1) “2siceY (2) “2 sire (1) *“24siteZ( 2) 2 
siteRad(1)*2-siteRad(3)*2-sitexX(1)%*%2+sitexX(3)%2-... 
Sitey (1) “2+siceY (3) “2-siteZz (1)°2+siteZ (3)°2; 


>» COSLTLcCient Matrix A 


Lo = 


[add aiz als; 221 azz azol; 


& Matrix B 
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B = [oly bz]; 


o Find SoluLions £O x, yy, and Zz 
X=A\B; 


interX (h) =X (1); 
imtcery (h)=xX (2); 
interZ (h) =X (3); 


approxxX=mean (interxX) ; 
approxY=mean (interyY) ; 
approxa=mean (interZ) ; 


decp (h) =sqgrt (approxxX*2+approxY*2+approxZ”’2) ; 
end 


ie) 


6 Mean estimate position error per simulation 
averagePositionEkError (N)=mean (decp) ; 

& Standard Deviation of Error 
stDevPositionError (N)=std(decp) ; 

% Mean Radial Spherical Error per simulation 
stdxX = std(interx) ; 

stdy = std(intery); 

stdZ = std(interZ) ; 


MRGE(N) = Sqrt (sStdx*2-stdy*2+sctaa2); 


numSim(N) = N; 

% Plot 

figure (N); 

Cli? 

hold on; 

col= [1 @ U0, 0 0 1, U0 1, 1 L'Ole seeler map 

v= iI sCOlOr Counter 


title(['3 eNodeB, ',num2str(decp(h)),' Meters from '... 
‘FpproxziMacion Lo Un’), *"Fontaize’, 12); 

Xxlabel ('X-Axis (meters) ', 'FontSize',12); 

ylabel('Y-Axis (meters)', 'FontSize',12); 

Zlabel('Height (meters)', 'FontSize',12); 


for p=1:max_eNodeB 
*% Create spheres 
mesh (siteX (p)+siteRad(p) *sin(th) *cos(phi),siteY(p)t+... 


SiteRad(p)*sin(th)*sin(phi),siteZ(p)+... 


SiteRad(p) *cos (th) *ones(size(phi,1),size(phi,2)),... 


'FaceAlpha’,0.2,*FaceColor’,col(vivt2), ‘EdgeColor’,.«.«. 


col (vive+d), "“EdqgeAlpha’,0.1); 


fe) 


% Create antenna center points 


plot3 (siteX(p),siteY(p),siteZ(p),'d', 'MarkerFaceColor',... 


col(v:vt+2), 'MarkerSize',10); 
& Create towers 
ts=round(siteZ(p)); 
CxX=Zeros (1,tSs) 


7T/ 


ty=zeros(1,ts); 

tz=zeros(1,ts); 

ror t=0:ts 
tx (t+1)=siteX(p); 
ty (t+1)=sitey (p) ; 
CZ(erlLjHc, 

end 


fe) 


%* Plot Towers 
plots(tx,ty,tz, *-k*,*Linewiachn”’ ,4); 


Vv = vt+3; 
end 


fe) 


6 Plot Approximation Point 
plot3 (approxX, approxY, approxa, 'pr', 'MarkerSize',12); 


* Plot UE 
plot3 (0,0,0;," sk’, *Marxersize’,12); 
hold scr? 

end 


6 Plot Overall Results Error of Approximation Distance 
s to Actual Position 
figure (N+1); 
cli; 
axesl = axes('Parent', figure (Nt+l),'YGrid','on'); 
hold(axesl, 'all'); 
title ('Estimate Distance Error with Three eNodeBs',... 
'Fontei1 Ze" ,12)% 
Xxlabel('Simulation (each with 100000 iterations) ', 'FontSize',12); 
ylabel({'Average Distance from';... 
"Approximated Location to Actual UE (meters) '}, 'FontSize',12); 
bar (numSim, averagePositionError) ; 


% Plot MRSE of position error 

figure (N+2); 

CLE; 

axesl = axes('Parent', figure (Nt+2),'YGrid','on'); 

hold(axesl, 'all'); 

title('MRSE with Three eNodeBs', 'FontSize',12); 
Xlabel('Simulation (each with 100000 iterations) ', 'FontSize',12); 
ylabel ('MRSE 61% Containment Radius (meters) ', 'FontSize',12); 

bar (numSim, MRSE) ; 
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Ze Three Base Stations Through Varying Angles Example Plots 
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Figure 46. Sample plots from three base station simulation with varying angles, 


random distances and random eNodeB heights. 


(Diamonds denote the eNodeBs, a square indicates the actual UE location, and the star 


shows approximation center point.) 
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B. FOUR BASE STATIONS 


1. Four Base Stations MATLAB Code 


3D Base Station Simulation 

4 eNodeBs 

Random Angles, Distances and Heights (Fig 1-10) 

Even Angles, Random Distances and Heights (Fig 11-20) 

Even Angles, Fixed Distance of 1732m, Random Heights (Fig 21-30) 
Even Angles, Fixed Distances and Heights (Fig 31-40) 

Error Estimation Analysis (Fig 41) 

MSRE Error Estimation Analysis (Fig 42) 

LT L. A. Jarvis 

Rev. 7, 29 November 2010 


AP AP AP WP AP oP DP oP OP OP 


elear all; 


6 LTE Calculated Timing Advance Distance Parameter 
TA = 78.125; sMeters per unit of Timing Advance 
Uncomment to apply Timing Advance standard deviation 
SLaoTA = 0.3; 
Uncomment to apply quantization error standard deviation 
qarror = 7.125; 
Uncomment to apply bias based on quantization error 
= GError/ 27 


XP oP a AP OP OP 


‘on 
fats 
re) 
Cp) 


fe) 


% Simulated eNodeB Distance Parameters 


SsiteDist = 1200; SMean Site Distance 

siteStDev = 400; SSite Standard Deviation 
SiteHigh = 305; S6Mean Site Height 

SiteHSD = 250; 6Site Height Standard Deviation 


fe) 


& Simulation Parameters 
numSimulation = 10; 
max_eNodeB = 4; 

iterate = 100000; 


% Sphere Plots 
numPoints = 10; 
pha, = O¢piy numPoOiInts 22 pi; 
th =(O0:pi/numPoints:pi)'; 


6 Initialize arrays for data analysis 
% Average error per simulation 


averagePositionErrorl = zeros(1l1,numSimulation); 
averagePositionError2 = zeros(1,numSimulation); 
averagePositionError3 = zeros(1l1,numSimulation); 
averagePositionError4 = zeros(1l1,numSimulation); 


fe) 


6 Standard dev per simulation 
stDevPositionkrrorl zeros(1,numSimulation); 
stDevPositionkrror2 zeros(1,numSimulation); 
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stDevPositionkError3 
stDevPositionHrror4 
%& Mean Radial Spherical Error 


MRSE1 zeros(1,numSimulation) ; 
MRSE2 = zeros(1,numSimulation); 
MRSE3 = zeros(1,numSimulation) ; 
MRSE4 = zeros(1,numSimulation) ; 


fe) 


S oLlMULAtIOn Counter 
numS ium zeros (1,numSimulation) 


o 


count ls 


Loz D 1:4 
6 Setup Simulation 


tor N= snimSimulatiaon 


fe) 


— 


zeros(1l,numSimulation); 
zeros(l,numSimulation); 
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6 Initialize counter for figures 


6 Initialize sized arrays 


distance = zeros(1l,max_eNodeB); *sArray of distances to eNodeBs 
sitexX = zeros(1,max_eNodeB) ; sArray of eNodeB X coordinates 
siteY = zeros(1,max_eNodeB) ; SArray of eNodeB Y coordinates 
siteZ = zeros(1,max_eNodeB) ; SsArray of eNodeB Z coordinates 
SiteTA = zeros(l,max_eNodeB) ; SArray of Timing Advance 
SiteRad = zeros(l,max_eNodeB) ; SArray of eNodeB radii 
interX = zeros(1,iterate); 
interY = zeros(l1,iterate); 
interZ = zeros(1,iterate); 
aX = zeros(1,max_eNodeB-1); SArray of X coefficients 
aY = zeros(1,max_eNodeB-1); SArray of Y coefficients 
aZ = zeros(1,max_eNodeB-1); sArray of Z coefficients 
b = zeros(1,max_eNodeB-1); cArray OL B Constants 
% Array of distances for center point estimation on (x,y,Z) 
% plane 
decp = zeros(l1,iterate); 
% Begin iterations 
for h=l:iterate 
% Create eNodeBs 
for i=l:max_eNodeB 
%& Distances to simulated eNodeBs with (X,Y,Z) coordinates 
if (D==1) 
distance(i) = siteStDev*randn(l) + siteDist; 
theta = 2*pi*rand(1); S“Random angles from UE 
% Random eNodeB Height...Z coordinate 
siteZ(1i) = abs(siteHSD*randn(1) + siteHigh); 
elseif (D==2) 
distance(i) = siteStDev*randn(l) + siteDist; 
theta = 2*pi*i/max_eNodeB; SEven angles from UE 
% Random eNodeB Height...Z coordinate 
siteZ(1i) = abs(siteHSD*randn(1) + siteHigh); 
elseif (D==3) 
distance(1i) = 1732; SFixed distances 
theta = 2*pi*i/max_eNodeB; SEven angles from UE 
% Random eNodeB Height...Z coordinate 
siteZ(1i) = abs(siteHSD*randn(1) + siteHigh); 
elseif (D==4) 


81 


distance(1i) = 1732; SFixed distances 


theta = 2*pi*i/max_eNodeB; shven angles from UE 
% Fixed eNodeB Height...Z coordinate 
siteZ(i) = siteHigh; 
end 
SsitexX(1i) = cos(theta) *distance(1); %X coordinate 
siteY(1) = sin(theta) *distance(i); %Y coordinate 
SsiteTA(i) = round(distance(i)/TA); %Timing Advance 


6 Uncomment to apply Timing Advance standard deviation 
S61 CEeTA (1) =round (distance (1) /TA)tround fSstdqTA*randn (1) )>? 


SiteRad(i) = siteTA(i) * TA; SRadius from TA 
6 Uncomment to apply quantization error to radii 
6siteRad(i) = siteTA(i)*TA+tgError*rand(1)-—bias; 


end 


Find point of intersection 


fe\\e) 


% Due to even angles, fixed distances and fixed heights, 
6 this simulation has the potential to find a case where 
% there is no solution or many solutions. For systems 

% of equations, the unknown variables can be solved using 
%6 matrices in the form of AX=B, where A contains the 

% coefficients of the unknown variables. Since the 

% coefficients for x, y and z are the same for all 

6 iterations, the only values that need to be determined 
% are the coefficients for matrix B. Matrix A is 

6 Singular, meaning the determinant of A is equal to 0. 

% Therefore, AX=B either does not exist, or is not unique. 
% For these cases, a least-squares solution is found 

6 using MATLAB function "pinv" so that the simulation can 
% continue to run without interruption, and provide 

% reasonable results. 


6 Find 2—Variable coerrticients 


all = (sitexX(2)-sitexX(1))%2; 
a21 = (siteX(3)-siteX(1))%2; 
a31 = (sitexX(4)-sitexX(1))%2; 


6 Find y-variable coefficients 


al2 = (siteY(2)-siteY(1))%2; 
a22 = (siteY(3)-siteY(1))%2; 
a3Z2 = (sitey (4) —sitey(1))*2; 


&% Find z-variable coefficients 


al3 = (siteZ(2)-siteZ(1))%2; 
a23 = (siteZ(3)-siteZ(1))%2; 
a33 = (siteZ(4)-siteZ(1))%2; 


6 Find values for B-matrix 

bl = siteRad(1)%*%2-siteRad(2)*2-sitexX(1)%*24+sitexX(2)%2-... 
SiteyY (hb)? 2ZsiceYy (2) °2=—sires.( 1) *2's1 Cen (2). 2; 

b2 = siteRad(1)%*2-siteRad (3) *2-sitexX(1)%2+siteX(3)%2-... 
SiteyY CL) “ZrsiceyY (3) “2Z—-siteZ (1) “2'sites (3s) 2s 

b3 = siteRad(1)%*2-siteRad (4) *2-siteX(1)%*%2+sitex(4)%*%2-... 
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SsiItey (1) “2+sicey (4) “2—sitez (1) “2+siteZ (4) "2; 


%& Coefficient Matrix A 
A = [all al2 al3; a21 a22 a23; a3l1 a32 a33]; 


oP 


Matrix B 
= [bls b2? 53); 


W 


sein SOlLULLONS LO xy Vy, and 2 
Lt (D<=3) 
= Fee 
else 
X = pinv (A) *B; 
end 


interxX (h) =X (1); 
intery (h)=X (2); 
interZ (h) =X (3); 


approxxX=mean (interxXx) ; 
approxY=mean (interyY) ; 
approxa=mean (interZ) ; 


decp (h) =sqrt (approxxX*2+approxY*2+approxZ”’2) ; 
end 


%& Calculate standard deviation of coordinate values 
stdxX = std(interx) ; 
stdy = std(intery); 
StdZ std (interZ) > 


if (D==1) 
% Mean estimate position error per simulation 
averagePositionErrorl (N)=mean (decp) ; 
6 oLandeard Deviation of Error 
stDevPositionErrorl (N)=std(decp) ; 
% Mean Radial Spherical Error per simulation 
MRSE1 (N)= sqrt (stdxX*2+stdY*2+stdZ%2) ; 

elseif (D==2) 
6 Mean estimate position error per simulation 
averagePositionEkError2 (N) =mean (decp) ; 
%& Standard Deviation of Error 
stDevPositionError2 (N)=std(decp) ; 
6 Mean Radial Spherical Error per simulation 
MRSEZ(N)= sqrt (stdx*2Z2+stdy*Z+staZ* 2); 

elseif (D==3) 
% Mean estimate position error per simulation 
averagePositionErrors3 (N)=mean (decp) ; 
%& Standard Deviation of Error 
stDevPositionkError3 (N)=std(decp) ; 
% Mean Radial Spherical Error per simulation 
MRSES(N)= Sort (stdx*2+stdyY"Z+sctdzZ* 2); 

elseif (D==4) 
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fe) 


% Mean estimate position error per simulation 
averagePositionkErrord4 (N) =mean (decp) ; 


fe) 


%® Standard Deviation of Error 
stDevPositionEkErrord4 (N)=std(decp) ; 


% Mean Radial Spherical Error per simulation 
MRSE4 (N)= sqrt (stdxX*2+stdY*2+stdZ%2) ; 


end 

numSim(N) = N; 

~ © LOL 

figure (count); 

Gli: 

hold on; 

col = [1 0 0, 0 0 Lt, 0 LG, 1 1 Ol>. scolor imap 

Vv =-1; scOolor Counter 


title(['4 eNodeB, ',num2str(decp(h)),' Meters from '... 
‘Approximation Lo VE"), 'Fontsize',12); 

Xxlabel ('X-Axis (meters)', 'FontSize',12); 

ylabel('Y-Axis (meters)', 'FontSize',12); 

Zlabel('Height (meters)', 'FontSize',12); 


for p=1:max_eNodeB 
~% Create spheres 
mesh (siteX(p)+siteRad(p) *sin(th) *cos(phi),siteY(p)t+... 


SiteRad(p)*sin(th)*sin(phi),siteZ(p)t+... 


SiteRad(p) *cos (th) *ones(size(phi,1),size(phi,2)),... 


'‘FPaceAlpha’, 0.2, "PaceColor’, col (vivtzZ).>.««.% 
"EdgeColor',col(v:ivt2), 'EdgeAlpha',0O.1); 
% Create antenna center points 
plot3(siteX(p),siteY(p),siteZ(p),'d',... 
"MarkerFaceColor',col(vivt2), 'MarkerSize',10); 


fe) 


> Create towers 
ts=round(siteZ(p)); 
tx=zeros (1, cs) > 
ty=zeros(1,ts); 
tCzZ=zeros (1, ts)? 
for t=0:ts 
tx (tt+1)=siteX(p); 
ty (t+1)=siteyY (p); 
tz (tt+1)=t; 
end 


fe) 


& Plot Towers 
plots (tx,ly, tz, "—k*;, "lanewioch’,4); 


Vv = vt3; 
end 
S Plot Approximation Point 
plots (approxx, approxY, aporoxZ, 'pr'’, 'MarkerSize",12); 


{eo} 


6 DLOL Lapproxx,;aporoxy, "pr’, “Markerbize’, 12); 


o PLOL. UE 
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plot3(0,0,0,'sk', 'MarkerSize',12); 
hobo’ arr > 
COUnEL = counttTL; 
end 
end 


errorMat = [averagePositionErrorl;averagePositionError2;... 
averagePositionkrror3;averagePositionkError4]; 
MRSEMat = [MRSE1;MRSE2;MRSE3;MRSE4]; 


% Plot Overall Results Error of Approximation Distance to 
%® Actual Position 
figure (count) ; 
Cir: 
Hold on; 
title('Estimate Distance Error with 4 eNodeB', 'FontSize',12); 
Xlabel('Simulation (each with 100000 iterations) ', 'FontSize',12); 
ylabel({'Average Distance from';... 
"Approximated Location to Actual UE (meters)'},'FontSize',12); 
bar (errorMat', 'grouped'); 
legend('Random Angles, Distances, Heights',... 
‘Even Angles, Random Distance and Height',... 
"Even Angles, Fixed Distance, Random Height',... 
"Even Angles, Fixed Distance, Fixed Height'); 
Hold. OT? 


% Plot MRSE of position error 
Figure (counttl); 
CLT; 
Hola Gn: 
title('MRSE with 4 eNodeB', 'FontSize',12); 
Xlabel('Simulation (each with 100000 iterations) ', 'FontSize',12); 
ylabel ('MRSE 61% Containment Radius (meters) ', 'FontSize',12); 
bar (MRSEMat', 'grouped'); 
legend('Random Angles, Distances, Heights',... 
"Even Angles, Random Distance and Height',... 
"Even Angles, Fixed Distance, Random Height',... 
"Even Angles, Fixed Distance, Fixed Height'); 
nold Off; 
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p23 Random Angles, Distances and Heights Example Plots 
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Figure 47. Sample 4 eNodeB plots with random angles, distances and heights. 


(Diamonds denote the eNodeBs, a square indicates the actual UE location, and the star 


shows approximation center point.) 
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Ds Even Angles with Random Distances and Heights Example Plots 
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Figure 48. Sample 4 eNodeB plots with evenly spaced angles, random distances and 
heights. 


(Diamonds denote the eNodeBs, a square indicates the actual UE location, and the star 


shows approximation center point.) 
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4. Even Angles with Fixed Distances and Random Heights Example 
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Figure 49. Sample 4 eNodeB plots with evenly spaced angles, fixed 1732m distances 
and random heights. 
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3; Even Angles with Fixed Distances and Fixed Heights Example Plots, 
Standard Deviation Applied 
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Figure 50. Sample 4 eNodeB plots with evenly spaced angles, fixed 1732m distances 
and fixed 305m eNodeB heights, standard deviation applied. 
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c. MULTIPLE BASE STATIONS 


1. Multiple Base Stations MATLAB Code 


oe 


3D Multiple Base Station Simulation 

Combined Simulation 

Random Angles, Distances and Heights (Fig 1-8) 

Even Angles, Random Distances and Heights (Fig 9-16) 


AP ANP ol? 


oP oO 


Even Angles, Fixed Distances and Heights (Fig 25-32) 
Average Error Estimation Analysis (Fig 33) 

MRSE Error Estimation Analysis (Fig 34) 

LT i. 2 Jarvis 

Rev. 6, 29 November 2010 


oe 


oP ol? 


o\? 


elear all; 


6 LTE Calculated Timing Advance Distance Parameter 
TA = 78.125; sMeters per unit of Timing Advance 
6 Uncomment to apply Timing Advance standard deviation 
S6StdTA = 0.5; 
6 Uncomment to apply quantization error 
sqnrror = (o.iZ5; 
Uncomment to apply bias from quantization error 
bias. = GEVror/ 2? 


fe) 


% Simulated eNodeB Distance Parameters 


SsiteDist = 1200; SMean Site Distance 

siteStDev = 400; SSite Standard Deviation 
SiteHigh = 305; S6Mean Site Height 

SiteHSD = 250; 6Site Height Standard Deviation 


fe) 


%* Simulation Parameters 
max_eNodeB = 10; 
iterate = 100000; 


fe) 


% Sphere Plots 
numPoints = 10; 
phi. = 02 p1/nuMPoOines?2* D1; 
th =(Oepi7numPoints pi)"; 


6 Initialize arrays for data analysis 
% Average error per simulation 


averageErrorl = zeros(1,max_eNodeB-3); 
averageError2 = zeros(1,max_eNodeB-3); 
averageError3 = zeros(1,max_eNodeB-3); 
averageError4 = zeros(1,max_eNodeB-3); 
6 Standard dev per simulation 
stDevErrorl = zeros(1,max_eNodeB—-3) ; 
stDevError2 = : 


A 


stDevError3 zeros (1,max_eNodeB-3 
stDevError4 = zeros(1l,max_eNodeB-3 


fe) 


% Mean Radial Spherical Error 


A 


) 
zeros (1,max_eNodeB—-3) ; 

) 

) 
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Even Angles, Fixed Distance of 1732m, Random Heights (Fig 17-24) 


MRSE1 = 
MRSE2 = 
MRSE3 = 
MRSE4 = 


fe) 


zeros(l, 
zeros(l, 
Zeros (1, 
zeros(l1, 


num_eNodeB = zer 


fe) 


count = 


ror Db = 


fe) 


tor 


fo) 
xe) 


if 


lege 


N = 3:ma 
% Initia 
distance 
sitex = 
sitey 
siteZ = 
SiteTA = 
SsiteRad 
aX = zer 
aY = zer 
aZ = zer 
b = Zero 
interxX 
interY = 
interZ = 
Array of 
decp = Zz 
% Begin 
for h=1: 
6 Cr 
ror 


fo) 
xe) 


max_eNodeB-3) ; 

max _eNodeB-3) ; 
) 
) 


A 


max _eNodeB-3 
max _eNodeB-3 


A 


&% Simulation Counter 


os(l,max_eNodeB-3); 


6 Initialize counter for figures 


6 Setup Simulation 


x eNodeB 


lize sized arrays 
= zeros(1,N); sArray of distances to eNodeBs 
zeros(1,N); sArray of eNodeB X coordinates 
zeros (1,N); sArray of eNodeB Y coordinates 
Zeros (1,N)%4 sArray of eNodeB Z coordinates 
zeros(1,N); SsArray of Timing Advance 
= zeros(1,N); sArray of eNodeB radii 
6s-(C1., N=1) 3 sArray of X coefficients 
os (1, N-—L); sArray of Y coefficients 
oe Cl, N=1) 3 sArray of Z coefficients 
s(l,N-1) > sArray of B constants 


zeros(1,iterate); 
zeros(1,iterate); 
Zeros (1, 1Cerare) + 


distances for center point estimation on (x,y,Z) 


plane 


eros(l1,iterate); 
iterations 
iterate 
eate eNodeBs 
i=1:N 
Distances to simulated eNodeBs with (X,Y,Z) coordinates 
if (D==1) 
distance(i) = siteStDev*randn(l) + siteDist; 
theta = 2*pi*rand(1); SRandom angles from UE 
% Random eNodeB Height...Z coordinate 
siteZ(1i) = abs(siteHSD*randn(1) + siteHigh); 
elseif (D==2) 
distance(1) = siteStDev*randn(l) + siteDist; 
theta = 2° p17 i/N- SEven angles from UE 
% Random eNodeB Height...Z coordinate 
siteZ(1i) = abs(siteHSD*randn(1) + siteHigh); 
elseif (D==3) 
distance(i) = 1732; SFixed distances 
theta = 2*pi*i/N; SEven angles from UE 
% Random eNodeB Height...Z coordinate 
siteZ(1i) = abs(siteHSD*randn(1) + siteHigh); 
elseif (D==4) 
distance(1i) = 1732; SFixed distances 
theta = -2*p17*i/N: SEven angles from UE 
% Fixed eNodeB Height...Z coordinate 
siteZ(1i) = siteHigh; 
end 
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siteX(1) = cos(theta) *distance(i); %&X coordinate 

siteY(1) = sin(theta) *distance(i); %Y coordinate 

SiteTA(i) = round(distance(i)/TA); %Timing Advance 

6 Uncomment to apply Timing Advance standard deviation 

S51 cela) = round (distance G.) /TA)+<2% 
SsroundiertalA*raendn (1).) + 

SiteRad(i) = siteTA(1i) * TA; SRadius from TA 


Uncomment to apply quantization error 
SiteRad(i)=siteTA (i) *TAt+tgError*rand(1)-—bias; 


6 Find point of intersection 


Due to even angles, fixed distances and fixed heights, 
this simulation has the potential to find a case where 
there is no solution or many solutions. For systems 

of equations, the unknown variables can be solved using 
matrices in the form of AX=B, where A contains the 
coefficients of the unknown variables and B contains 
the constants from the individual equations. Since the 
coefficients for x, y and z are the same for all 
iterations, the only values that need to be determined 
are the constants for matrix B. Matrix A is 

Singular, meaning the determinant of A is equal to 0Q. 
Therefore, AX=B either does not exist, or is not unique. 
For these cases, a least-squares solution is found 
using MATLAB function "pinv" so that the simulation can 
continue to run without interruption, and provide 
reasonable results. 


AP WP AP WP AW oP OP A OP OP OP OP OP OP OP OP 


s Find A MacLrix coerrTicient values 
ZN 


~~ 


ee Gites (sitex (£)—sitex(1))“2; 
aY(f-1) = (siteY(f)-siteY(1))%2; 
Z(f-1 (sate (f)—-siteZ(1))*2; 


%6 Find B matrix constant values 
oO (r=L). = SiteRad (1) *“2-siternaed (rt) “2-sirtex (1) wate ex 
sitex(f)*2-siteyY(1)*2+siteY(f)*2-siteZ(1)%2+... 
SLCeZ. CE) "zs 
end 


= Coerricient Matrix A 


Al = [ax; aY; aZ;]; 
A= Al'; 


= Wind SsoluLlions (CO x, VY, and z 


if (D<=3) 
X = A\B; 
else 
X = pinv (A) *B; 
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end 


interX (h) =X (1); 
intery (h)=X (2); 
interZ (h) =X (3); 


fe) 


6 Find the approximation coordinates 
approxxX=mean (interxXx) ; 
approxY=mean (interyY) ; 
approxa=mean (interZ) ; 


6 Find the positon error from approximation to UE 
decp (h) =sqrt (approxxX*2+approxY%2) ; 
decp (h) =sqrt (approxxX*2+approxY*2+approxZ”%2) ; 
end 


if (D==1) 
% Mean estimate position error per simulation 
averageErrorl (N) =mean (decp) ; 
%& Standard Deviation of Error 
stDevErrorl (N)=std(decp) ; 
% MRSE per simulation 
stdxX=std(interx); 
stdYy=std(interyY); 


SstdZ=std(interZ) ; 


stdZ=std(interZ); 
end 
MRSHIL(N)=sqrl (stdx*2Z+stdyY*Ztstaa’ 2); 
elseif (D==2) 
% Mean estimate position error per simulation 
averageError2 (N) =mean (decp) ; 
%& Standard Deviation of Error 
stDevError2 (N)=std(decp) ; 
% MRSE per simulation 
stdxX=std(interx); 
stdYy=std(interyY); 
SstdZ=std(interZ) ; 
if N== 
stdZz=0; 
else 
stdZ=std(interZ); 
end 
MRSEZ(N)=Sqrl (stdxk*27stdy*2zts taza 2); 
elseif (D==3) 
% Mean estimate position error per simulation 
averageError3 (N) =mean (decp) ; 
%& Standard Deviation of Error 
stDevError3 (N)=std(decp) ; 


fe) 


% MRSE per simulation 
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T 


stdX=std(interX) 
stdY=std(interyY) 
S$stdZ=std(interZ 


)} 


if N== 
stdZ=0; 
else 
stdZ=std(interZ); 
end 
MRSES (N)=Ssqrt (stdx"2+sctdy*2+siazZ”* 2); 
elseif (D==4) 


% Mean estimate position error per simulation 
averageError4 (N) =mean (decp) ; 
%& Standard Deviation of Error 
stDevError4 (N)=std(decp) ; 
% MRSE per simulation 
stdxX=std(interx); 
stdYy=std(interyY); 
SstdZ=std(interZ) ; 
if N== 
stdZzZ=0; 
else 
stdZ=std(interZ); 
end 
MRSE4 (N) =sqrt (stdX*2+stdY*2+stdZ%2) ; 
end 
num_eNodeB(N) = N; 


& Plot Network 
figure (count); 


cli; 

hold on; 

Grid on; 

col = [1 0 0, 0:0 ti, U1 By, 12 tO, 2 UO, 00 Tt, 2 1 Ue was 
Li 0,1 0 U0, 0-0 117 sColor map 

v= 1; *Color counter 

ZAam LO. Z2500F 4 

view([-50 30]); 

if N== 


title ([int2str(N),' eNodeB, ',num2str(decp(h)),... 
" Meters from Approximation to UE: Z-Coordinate ',... 
INtZSLCY (approxZ),”’ Mercere’), *Fonrsize*,12)>3 
else 
title ([int2str(N),' eNodeB, ',num2str(decp(h)),... 
'" Meters from Approximation to UE'],'FontSize',12); 
end 
Xxlabel ('X-Axis (meters) ', 'FontSize',12); 
ylabel('Y-Axis (meters)', 'FontSize',12); 
Zlabel('Height (meters)', 'FontSize',12); 


for p=1:N 
% Create spheres 
mesh (siteX(p)+siteRad(p) *sin(th) *cos(phi),siteY(p)t+... 


Si ceRad ()) *san (lh) san (oli) ,SLcer(O) Fees 


SiteRad(p) *cos (th) *ones(size(phi,1),size(phi,2)),... 


'PaceAlpha’,0.0c;* Pace tolor’ ,col(vivt+Z) > -« «. 
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"EdgeColor',col(v:ivt2),'EdgeAlpha',0O.1); 


% Create antenna center points 
plot3(siteX(p),siteY(p),siteZ(p),'d',... 
"MarkerFaceColor',col(v:ivt2), 'MarkerSize',10); 


% Create towers 
ts=round(siteZ(p)); 
CK=zeros (1,7Ts); 
ty=zeros(1,ts); 
tz=—zeros (1,ts); 
for t=0:ts 
tx (t+1)=siteX(p); 
ty (t+1)=siteyY (p); 
tz (tt+1)=t; 
end 


& Plot Towers 
plots (tx,ty,tz, *—k*,* lanewidch”’,4).; 


vy = Vhs; 
end 
% Plot Approximation Point 
if N== 


pLOt (approxx,approxyY, *pr’, "Markersize’, 12; «4 
"MarkerFaceColor','r'); 
else 


pLlot3 (approxx,approxY,approxa, 'pr', 'MarkerSize’, 12, ««. 


"MarkerFaceColor','r'); 


end 

6 PLOU UB 

plots (0,0;,0, *sk*, *Markersize’, 12); 
hold ©r£i; 

count = counttrl; 


end 
end 


% Plot Overall Results Error of Approximation Distance to 
> Actual Position 

figure (count); 

Cir; 

hold. on; 

title('Estimate Error with Multiple eNodeB', 'FontSize',12); 
Xxlabel('Number of eNodeB', 'FontSize',12); 

ylabel({'Average Distance from',;... 

"Center Point Estimate to UE (meters) '}, 'FontSize',12); 
plot (num_eNodeB (3:N),averageErrorl (3:N),'-bs', 'LineWidth',2 
plot (num_eNodeB (3:N), averageError2 (3:N), '-rd', 'LineWidth',2 
plot (num_eNodeB (3:N), averageError3 (3:N),'-go', 'LineWidth',2 
plot (num_eNodeB (3:N), averageError4 (3:N), '-mx', 'LineWidth',2 
legend('Random Angles, Distances, Heights',... 

"Even Angles, Random Distance and Height',... 


95 


ee ee 
~ 


"Even Angles, Fixed Distance, Random Height',... 
"Even Angles, Fixed Distance, Fixed Height'); 
nold Orr; 


% Plot MRSE of position error 

figure (count+t1); 

clit; 

nold. on; 

title('MRSE with Multiple eNodeB', 'FontSize',12); 

Xxlabel('Number of eNodeB', 'FontSize',12); 

ylabel ('MRSE 61% Containment Radius (Meters)', 'FontSize',12); 

plot (num_eNodeB (3:N),MRSE1(3:N), '-bs', 'LineWidth',2); 

plot (num_eNodeB (3:N),MRSE2 (3:N), '-rd', 'LineWidth',2); 

plot (num_eNodeB (3:N),MRSE3(3:N), '-go', 'LineWidth',2); 

plot (num_eNodeB (3:N),MRSE4 (3:N), '-mx', 'LineWidth', 2) 

legend('Random Angles, Distances, Heights',... 
"Even Angles, Random Distance and Height',... 
"Even Angles, Fixed Distance, Random Height',... 
"Even Angles, Fixed Distance, Fixed Height'); 

nolLd ofa; 
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p23 Random Angles, Distances and Heights Example Plots 
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Figure 51. Sample multiple eNodeB plots with random angles, distances and heights. 


(Diamonds denote the eNodeBs, a square indicates the actual UE location, and the star 


shows approximation center point.) 
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Ds Even Angles with Random Distances and Heights Example Plots 
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Figure 52. Sample multiple eNodeB plots with evenly spaced angles, random 
distances and heights. 


(Diamonds denote the eNodeBs, a square indicates the actual UE location, and the star 


shows approximation center point.) 
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4. Even Angles with Fixed Distances and Random Heights Example 
Plots 
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Figure 53. Sample multiple eNodeB plots with evenly spaced angles, fixed 1732m 
distances and random heights. 
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3; Even Angles with Fixed Distances and Fixed Heights Example Plots 
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Figure 54. Sample multiple eNodeB plots with evenly spaced angles, fixed 1732m 
distances and fixed 305m eNodeB heights. 
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